CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

影響: go:github.com/coredns/coredns >= 1.9.4, <= 1.14.4 → 1.14.5

A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8s_external headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8s_external transferer can emit an empty []dns.RR batch, and the shared transfer plugin indexes records[0] without checking that the batch is non-empty. In normal CoreDNS mode the panic is recovered and returned as SERVFAIL, but repeated tr…

在 GitHub Advisory Database 阅读

2026/10/17 04:26，GitHub Advisory Database 发布了“CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin”（类型：漏洞公告）。严重程度为“低危”（low）。相关技术：Go、GitHub、Kubernetes。CVE：CVE-2026-62994。