Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-0874

Fixed in a distro release EPSS <1%CVSS 5.3

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

Published 2024-04-25 · CVE record · OSV

Products: Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Logging Subsystem for Red Hat OpenShift, Red Hat Advanced Cluster Management for Kubernetes 2

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/coredns/coredns1.11.2

Distro releases

ReleasePackageFixed in
Chainguardcloudflared2024.1.0-r9
Chainguardconsul-1.151.15.11-r2
Chainguardconsul-1.15-oci-entrypoint1.15.11-r2
Chainguardconsul-1.15-oci-entrypoint-compat1.15.11-r2
Chainguardconsul-1.161.16.7-r3
Chainguardconsul-1.16-oci-entrypoint1.16.7-r3
Chainguardconsul-1.16-oci-entrypoint-compat1.16.7-r3
Chainguardconsul-1.171.17.4-r3
Chainguardconsul-1.17-fips1.17.4-r4
Chainguardconsul-1.17-fips-oci-entrypoint1.17.4-r4
Chainguardconsul-1.17-fips-oci-entrypoint-compat1.17.4-r4
Chainguardconsul-1.17-oci-entrypoint1.17.4-r3
Chainguardconsul-1.17-oci-entrypoint-compat1.17.4-r3
Chainguardcoredns0
Chainguardcoredns-compat0
Chainguardcoredns-fips1.11.3-r0
Chainguardjuicefs-1.20
Chainguardjuicefs-1.2-compat0
Chainguardjuicefs-1.31.3.0-r2
Chainguardjuicefs-1.3-compat1.3.0-r2
Chainguardkubernetes-dns-node-cache1.23.0-r7
Chainguardkuma-coredns0
SUSE Package Hub 15 SP6coredns1.11.3-bp156.4.3.1
Wolficloudflared2024.1.0-r9
Wolficonsul-1.151.15.11-r2
Wolficonsul-1.15-oci-entrypoint1.15.11-r2
Wolficonsul-1.15-oci-entrypoint-compat1.15.11-r2
Wolficonsul-1.161.16.7-r3
Wolficonsul-1.16-oci-entrypoint1.16.7-r3
Wolficonsul-1.16-oci-entrypoint-compat1.16.7-r3
Wolficoredns0
Wolficoredns-compat0
Wolfijuicefs-1.31.3.0-r2
Wolfijuicefs-1.3-compat1.3.0-r2
Wolfikubernetes-dns-node-cache1.23.0-r7
Wolfikuma-coredns0
openSUSE Leap 15.6coredns1.11.3-bp156.4.3.1