Red Hat OpenShift Container Platform 4/openshift4/ose-coredns

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginCVE-2026-62994 · GHSA-74W3-63XV-X9MVVersion ranges need review.	github.com/coredns/coredns Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9	GoRed Hat	Low	Fix reported	2026-10-20
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPCCVE-2026-33190 · GHSA-QHMP-Q7XH-99RHVersion ranges need review.	github.com/coredns/coredns Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9	GoRed Hat	High	Fix reported	2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-14
Handshake messages may be processed at the incorrect encryption level in crypto/tlsCVE-2025-61730 · GO-2026-4340	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	Medium	Fix reported	2026-08-07
github.com/coredns/coredns: CoreDNS: Denial of Service via specially crafted DNS queryCVE-2026-62299	Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-coredns-rhel9	Red Hat	Medium	No fix reported	Not recorded