x/vulndb: potential Go vuln in github.com/coredns/coredns: CVE-2024-0874

[GoVulnBot]

CVE-2024-0874 references github.com/coredns/coredns, which may be a Go module.

Description:
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-0874
• JSON: https://github.com/CVEProject/cvelist/tree/dee94b1e5126df3cc4eae107f464670d9f04291e/2024/0xxx/CVE-2024-0874.json
• web: https://access.redhat.com/security/cve/CVE-2024-0874
• web: https://bugzilla.redhat.com/show_bug.cgi?id=2219234
• report: CD bit response is cached and served later coredns/coredns#6186
• fix: plugin/cache: key cache on Checking Disabled (CD) bit coredns/coredns#6354
• Imported by: https://pkg.go.dev/github.com/coredns/coredns?tab=importedby

Cross references:

• Module github.com/coredns/coredns appears in issue x/vulndb: potential Go vuln in github.com/coredns/coredns: GHSA-gv9j-4w24-q7vx #368 EFFECTIVELY_PRIVATE
• Module github.com/coredns/coredns appears in issue x/vulndb: potential Go vuln in github.com/coredns/coredns: GHSA-ch7v-37xg-75ph #1606 EFFECTIVELY_PRIVATE
• Module github.com/coredns/coredns appears in issue x/vulndb: potential Go vuln in github.com/coredns/coredns: GHSA-h828-v5pv-33qx #1610 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/coredns/coredns
      vulnerable_at: 1.11.1
      packages:
        - package: Logging Subsystem for Red Hat OpenShift
summary: CVE-2024-0874 in github.com/coredns/coredns
cves:
    - CVE-2024-0874
references:
    - web: https://access.redhat.com/security/cve/CVE-2024-0874
    - web: https://bugzilla.redhat.com/show_bug.cgi?id=2219234
    - report: https://github.com/coredns/coredns/issues/6186
    - fix: https://github.com/coredns/coredns/pull/6354
source:
    id: CVE-2024-0874

[gopherbot]

Change https://go.dev/cl/586484 mentions this issue: data/reports: add 73 unreviewed reports

[gopherbot]

Change https://go.dev/cl/590039 mentions this issue: data/reports: add 51 reports

[gopherbot]

Change https://go.dev/cl/595960 mentions this issue: data/reports: review 3 reports, add 2 reports