{"id":"CVE-2024-0874","title":"A flaw was found in coredns","summary":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-524"],"vendor":"Red Hat","product":"coredns","affected":["coredns < 1.11.2","openshift4/ose-coredns (all versions)","openshift4/ose-coredns (all versions)","openshift4/ose-coredns-rhel9 (all versions)","openshift4/ose-coredns-rhel9 (all versions)","openshift-logging/logging-loki-rhel8","rhacm2/lighthouse-agent-rhel9 (all versions)"],"published":"2024-04-25","updated":"2026-10-08","sourceUpdated":"2026-10-08T12:17:07.747","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-0874","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0041","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:4850","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:6009","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:6406","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0874","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219234","label":"secalert@redhat.com"},{"url":"https://github.com/coredns/coredns/issues/6186","label":"secalert@redhat.com"},{"url":"https://github.com/coredns/coredns/pull/6354","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:0041","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0874","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219234","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/coredns/coredns/issues/6186","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/coredns/coredns/pull/6354","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2024-07-13T20:18:31.995445Z"},"epss":0.0076,"epssPercentile":0.53866,"ingestedAt":"2026-10-08T12:39:48.693Z","slug":"CVE-2024-0874","body":"## Overview\n\nA flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}