CVE-2022-2837
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
Résumé
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Go
github.com/coredns/coredns
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.9.3"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web bugzilla.redhat.com