REDHAT-BUG-2219234: Medium severity coredns vulnerability
Coredns mishandling of CI bit: CD bit response is cached and served later
What happened: If CD bit is set in query, it disables validation at remote server
What you expected to happen: CD queries may pass, but the same answer must not be served to queries without CD bit set
https://github.com/coredns/coredns/issues/6186
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2219234?
The severity of REDHAT-BUG-2219234 is considered high due to potential validation bypass issues.
How do I fix REDHAT-BUG-2219234?
To fix REDHAT-BUG-2219234, upgrade to the latest version of CoreDNS that addresses this issue.
What is the impact of not addressing REDHAT-BUG-2219234?
Not addressing REDHAT-BUG-2219234 could result in unauthorized manipulation of DNS responses by affecting validation.
Which versions of CoreDNS are affected by REDHAT-BUG-2219234?
All versions of CoreDNS that allow caching of responses with the CD bit set are affected by REDHAT-BUG-2219234.
What specific issue does REDHAT-BUG-2219234 describe?
REDHAT-BUG-2219234 describes an issue where the CoreDNS mishandles the CD bit, caching responses that should not be served without validation.