Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 905301 (CVE-2022-2835, CVE-2022-2837) - net-dns/coredns: multiple vulnerabilities
Summary: net-dns/coredns: multiple vulnerabilities
Alias: CVE-2022-2835, CVE-2022-2837
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial (vote)
Assignee: Gentoo Security
Whiteboard: ~4 [??]
Depends on:
Reported: 2023-04-29 17:10 UTC by John Helmert III
Modified: 2023-04-29 17:10 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-04-29 17:10:12 UTC
CVE-2022-2835 (

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

CVE-2022-2837 (

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.

The Redhat bug reports are without detail or reference of substance.