5.3

CVE-2024-0874

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://github.com/coredns/coredns
≫
Package coredns
Default Statusunaffected
Version < 1.11.2
Version 0
Status affected
VendorRed Hat
≫
Product Red Hat OpenShift Container Platform 4.13
Default Statusaffected
Version < *
Version v4.13.0-202408260940.p0.ge70f097.assembly.stream.el8
Status unaffected
VendorRed Hat
≫
Product Red Hat OpenShift Container Platform 4.14
Default Statusaffected
Version < *
Version v4.14.0-202408260910.p0.gfdd6037.assembly.stream.el8
Status unaffected
VendorRed Hat
≫
Product Red Hat OpenShift Container Platform 4.15
Default Statusaffected
Version < *
Version v4.15.0-202407230407.p0.g1326282.assembly.stream.el9
Status unaffected
VendorRed Hat
≫
Product Red Hat OpenShift Container Platform 4.16
Default Statusaffected
Version < *
Version v4.16.0-202406131906.p0.g04d84f7.assembly.stream.el9
Status unaffected
VendorRed Hat
≫
Product Logging Subsystem for Red Hat OpenShift
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat Advanced Cluster Management for Kubernetes 2
Default Statusaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.334
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secalert@redhat.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-524 Use of Cache Containing Sensitive Information

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.