What is GHSA-h92q-fgpp-qhrq?

GHSA-h92q-fgpp-qhrq is a security advisory published by GitHub Security Advisories with Medium severity. CoreDNS Cache Poisoning via a birthday attack

Which CVE IDs does GHSA-h92q-fgpp-qhrq cover?

GHSA-h92q-fgpp-qhrq covers the following CVE IDs: CVE-2023-30464. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h92q-fgpp-qhrq?

GHSA-h92q-fgpp-qhrq has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

Which products are affected by GHSA-h92q-fgpp-qhrq?

GHSA-h92q-fgpp-qhrq affects 1 product, including: go/github.com/coredns/coredns:\u003c= 1.10.1.

GHSA-h92q-fgpp-qhrqMediumCVSS 3.7

CoreDNS Cache Poisoning via a birthday attack

Vendor

GitHub Security Advisories

Published

September 18, 2024

Last Modified

June 5, 2026

🔗 CVE IDs covered (1)

CVE-2023-30464 →

📋 Description

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

🎯 Affected products1

go/github.com/coredns/coredns:<= 1.10.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-30464
https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
https://github.com/advisories/GHSA-h92q-fgpp-qhrq