Known vulnerabilities in coredns

Known vulnerabilities in coredns

Vendor: openEuler

Software: coredns

Software CPE: cpe:2.3:o:openeuler:coredns:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU147263 - Unintended Proxy or Intermediary ('Confused Deputy') CVE-2026-86003	CWE-441	Medium	No	No	1.7.0-1.10, 1.7.0-1.11	07.09.2026	SB2026090135 SB2026100159 SB2026100160 and 2 more
#VU146575 - Allocation of Resources Without Limits or Throttling CVE-2026-82399	CWE-770	Medium	No	No	1.7.0-1.10, 1.7.0-1.11	01.09.2026	SB2026090135 SB2026100159 SB2026100160 and 2 more
#VU127719 - Improper Authentication CVE-2026-35579	CWE-287	Medium	No	No	1.7.0-1.6, 1.7.0-1.8	25.04.2026	SB2026042541 SB2026081438 SB2026081439 and 3 more
#VU123610 - Predictable Seed in Pseudo-Random Number Generator (PRNG) CVE-2026-26018	CWE-337	Medium	No	No	1.7.0-1.7	06.03.2026	SB2026030624 SB2026072501
#VU123609 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-26017	CWE-367	Medium	No	No	1.7.0-1.4, 1.7.0-1.6	06.03.2026	SB2026030624 SB2026070966 SB2026071911 and 3 more
#VU121092 - Allocation of Resources Without Limits or Throttling CVE-2025-68151	CWE-770	Medium	No	No	1.7.0-1.4, 1.7.0-1.6	08.01.2026	SB2026010821 SB2026071911 SB2026071912 and 3 more
#VU115010 - Use of Insufficiently Random Values CVE-2025-58063	CWE-330	Medium	No	No	1.7.0-1.2	09.09.2025	SB2025090957 SB2025112459 SB2025112613 and 1 more
#VU110250 - Resource exhaustion CVE-2025-47950	CWE-400	Medium	No	No	1.7.0-1.4, 1.7.0-1.6	06.06.2025	SB2025060658 SB2025112138 SB2025112459 and 6 more