CVE-2024-0874

EUVD-2024-1245
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Azure Linux logo
Azure Linux Releases
Azure Package
Release
coredns
Azure Linux 3.0
0:1.11.1-2.azl3
fixed
CBL-Mariner 2.0
0:1.11.1-8.cm2
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2024:0041
https://access.redhat.com/errata/RHSA-2024:4850
https://access.redhat.com/errata/RHSA-2024:6009
https://access.redhat.com/errata/RHSA-2024:6406
https://access.redhat.com/security/cve/CVE-2024-0874
https://bugzilla.redhat.com/show_bug.cgi?id=2219234
https://github.com/coredns/coredns/issues/6186
https://github.com/coredns/coredns/pull/6354
https://access.redhat.com/errata/RHSA-2024:0041
https://access.redhat.com/security/cve/CVE-2024-0874
https://bugzilla.redhat.com/show_bug.cgi?id=2219234
https://github.com/coredns/coredns/issues/6186
https://github.com/coredns/coredns/pull/6354