CVE-2024-0874 Coredns: cd bit response is cached and served later
Attackers can retrieve invalid cached DNS entries due to flawed caching logic in CoreDNS, potentially exposing stale or incorrect data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-0874?
CVE-2024-0874 is a medium-severity vulnerability in Logging Subsystem for Red Hat OpenShift, published on 25 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.
Weakness: CWE-524
Which versions are affected by CVE-2024-0874?
3 open source packages ship an affected version, including github.com/coredns/coredns.
| Package | Affected | Fixed in |
|---|---|---|
github.com/coredns/coredns Go | All versions | 1.11.2 |
github.com/coredns/coredns Go | All versions | 1.11.2 |
github.com/coredns/coredns Go | All versions | 1.11.2 |
How do I fix CVE-2024-0874?
Upgrade github.com/coredns/coredns to 1.11.2 or later.
Is CVE-2024-0874 being exploited?
There is no known exploitation of CVE-2024-0874 in the wild and no public exploit code.
Sources
Also known as AZL-40201, AZL-40222, CLEANSTART-2026-GW29124, ECHO-deff-f49a-144e, GHSA-m9w6-wp3h-vq8g, GO-2024-2785 and 1 more.