CVE-2022-2837
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
Summary
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
Original description
The description as published by the source.
A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/coredns/coredns
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.9.3"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web bugzilla.redhat.com