CVE-2025-68151

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

CoreDNS before version 1.14.0 has a vulnerability in gRPC, HTTPS, and HTTP/3 server implementations that lack critical resource-limiting controls. An unauthenticated remote attacker can exhaust memory and degrade or crash the server by opening many concurrent connections.

Risk Assessment

The risk is a potential Denial of Service (DoS) attack on the DNS server, which can cause outages in network services that depend on name resolution.

Recommendation

Immediately update CoreDNS to version 1.14.0 or later, which includes necessary resource limits. In the meantime, consider applying firewall rules or connection rate limiters.

Original NVD description (English source)

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.0, multiple CoreDNS server implementations (gRPC, HTTPS, and HTTP/3) lack critical resource-limiting controls. An unauthenticated remote attacker can exhaust memory and degrade or crash the server by opening many concurrent connectio