CyberRota Analysis
AI-GeneratedCoreDNS versions prior to 1.14.5 are vulnerable due to a flaw in the rewrite plugin that allows a remote, unauthenticated client to exploit edns0 rewrite rules, potentially causing the server to panic and return a SERVFAIL response, which can degrade availability or crash the CoreDNS process. Organizations using affected versions should prioritize upgrading to 1.14.5 or later to mitigate this risk and ensure continued DNS service reliability. This vulnerability is especially relevant for environments relying on CoreDNS for DNS resolution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response rules, edns0SetResponseRule and edns0ReplaceResponseRule[T] in plugin/rewrite/edns0.go, call res.IsEdns0() and immediately dereference the returned *dns.OPT without a nil check when a downstream plugin returns a response with no OPT record. A remote, unauthenticated client can send a single ordinary DNS query matching a rewrite edns0 <local|nsid|subnet> <set|append|replace> ... revert rule, causing ResponseReverter in plugin/rewrite/reverter.go to panic, return SERVFAIL, and degrade availability, or crash the CoreDNS process if the debug directive disables recovery. This issue is fixed in version 1.14.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)