CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
影響: go:github.com/coredns/coredns >= 1.9.4, <= 1.14.4 → 1.14.5
A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8s_external headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8s_external transferer can emit an empty []dns.RR batch, and the shared transfer plugin indexes records[0] without checking that the batch is non-empty. In normal CoreDNS mode the panic is recovered and returned as SERVFAIL, but repeated tr…
Read on GitHub Advisory Database
| CVE | CVE-2026-62994 |
|---|---|
| Source | GitHub Advisory Database |
| Fetched | 10/22/2026, 01:17 AM |
| Data | Markdown JSON |
On 10/17/2026, 04:26 AM, GitHub Advisory Database published "CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin" (type: Advisory). Severity is "Low" (low). Related technologies: Go, GitHub, Kubernetes. CVE: CVE-2026-62994.