← All advisories

Moderate severityNVD Advisory· Published Sep 18, 2024· Updated Sep 19, 2024

CVE-2023-30464

CVE-2023-30464

Description

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/coredns/corednsGo	<= 1.10.1	—

Affected products

10

Coredns/Corednscpe-rescue
osv-coords9 versions
pkg:apk/chainguard/juicefs-1.2 pkg:apk/chainguard/juicefs-1.2-compat pkg:apk/chainguard/juicefs-1.3 pkg:apk/chainguard/juicefs-1.3-compat pkg:apk/wolfi/juicefs-1.3 pkg:apk/wolfi/juicefs-1.3-compat pkg:golang/github.com/coredns/coredns pkg:rpm/opensuse/coredns&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/coredns&distro=SUSE%20Package%20Hub%2015%20SP6
< 1.2.4-r1+ 8 more
- (no CPE)range: < 1.2.4-r1
- (no CPE)range: < 1.2.4-r1
- (no CPE)range: < 1.3.0-r2
- (no CPE)range: < 1.3.0-r2
- (no CPE)range: < 1.3.0-r2
- (no CPE)range: < 1.3.0-r2
- (no CPE)range: <= 1.10.1
- (no CPE)range: < 1.11.3-bp156.4.3.1
- (no CPE)range: < 1.11.3-bp156.4.3.1

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-h92q-fgpp-qhrqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-30464ghsaADVISORY
gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168baghsaWEB
github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573ghsaWEB

News mentions

0

No linked articles in our index yet.