CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

影響: go:github.com/coredns/coredns >= 1.9.4, <= 1.14.4 → 1.14.5

A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8s_external headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8s_external transferer can emit an empty []dns.RR batch, and the shared transfer plugin indexes records[0] without checking that the batch is non-empty. In normal CoreDNS mode the panic is recovered and returned as SERVFAIL, but repeated tr…

GitHub Advisory Databaseで読む

2026/10/17 04:26、GitHub Advisory Databaseが「CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「注意」(low) です。関連する技術: Go、GitHub、Kubernetes。CVE: CVE-2026-62994。