{"id":"ghsa-ghsa-74w3-63xv-x9mv","seq":2455,"kind":"advisory","title":"CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin","url":"https://github.com/advisories/GHSA-74w3-63xv-x9mv","permalink":"https://vulnpulse.app/items/ghsa-ghsa-74w3-63xv-x9mv","summary":"影響: go:github.com/coredns/coredns >= 1.9.4, <= 1.14.4 → 1.14.5\nSummary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8s_external headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8s_external transferer can emit an empty []dns.RR batch, and the shared transfer plugin indexes records[0] without checking that the batch is non-empty. In normal CoreDNS mode the panic is recovered and returned as SERVFAIL, but repeated tr…","severity":"low","techs":["go","github","kubernetes"],"cves":["CVE-2026-62994"],"tags":["GHSA-74w3-63xv-x9mv","github.com/coredns/coredns"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-16T19:26:42.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}