NULL pointer dereference in CoreDNS - CVE-2026-62299
Published: July 13, 2026
Vulnerability identifier: #VU137371
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-62299
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to a null pointer dereference in the rewrite plugin edns0 response-revert rules when processing a downstream response with no OPT record after a matching edns0 rewrite rule with the revert flag enabled. A remote attacker can send a DNS query that triggers the queued response rule to cause a denial of service.
If the debug directive is enabled, the panic is not recovered and the issue can crash the entire CoreDNS process.
Affected software
CoreDNS
How to mitigate CVE-2026-62299
Install security update from vendor's website.
CoreDNS - update to 1.14.5