Known vulnerabilities in coredns

Vendor: openEuler
Software: coredns
Software CPE: cpe:2.3:o:openeuler:coredns:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting coredns coredns is affected by 5 known vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123610 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2026-26018		 CWE-337 Medium
No
No
 1.7.0-1.7 06.03.2026 SB2026030624
SB2026072501
#VU123609 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-26017		 CWE-367 Medium
No
No
 1.7.0-1.4, 1.7.0-1.6 06.03.2026 SB2026030624
SB2026070966
SB2026071911
and 3 more
#VU121092 - Allocation of Resources Without Limits or Throttling
CVE-2025-68151		 CWE-770 Medium
No
No
 1.7.0-1.4, 1.7.0-1.6 08.01.2026 SB2026010821
SB2026071911
SB2026071912
and 3 more
#VU115010 - Use of Insufficiently Random Values
CVE-2025-58063		 CWE-330 Medium
No
No
 1.7.0-1.2 09.09.2025 SB2025090957
SB2025112459
SB2025112613
and 1 more
#VU110250 - Resource exhaustion
CVE-2025-47950		 CWE-400 Medium
No
No
 1.7.0-1.4, 1.7.0-1.6 06.06.2025 SB2025060658
SB2025112138
SB2025112459
and 6 more