CVE-2025-58063

{
  "id": "CVE-2025-58063",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-09T20:15:48.057",
  "lastModified": "2026-10-19T17:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affected services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and uses them as TTL values. Large lease IDs become very large TTLs when cast to uint32. This enables cache pinning attacks. Version 1.12.4 contains a fix for the issue."
    },
    {
      "lang": "es",
      "value": "CoreDNS es un servidor DNS que encadena plugins. A partir de la versión 1.2.0 y anterior a la versión 1.12.4, el plugin etcd de CoreDNS contiene una vulnerabilidad de confusión de TTL donde los IDs de arrendamiento se utilizan incorrectamente como valores TTL, lo que permite ataques de fijación de caché DNS. Esto crea efectivamente una condición de DoS para la resolución DNS de los servicios afectados. La función 'TTL()' en 'plugin/etcd/etcd.go' convierte incorrectamente los IDs de arrendamiento de etcd (enteros de 64 bits) a uint32 y los utiliza como valores TTL. Los IDs de arrendamiento grandes se convierten en TTLs muy grandes cuando se convierten a uint32. Esto permite ataques de fijación de caché. La versión 1.12.4 contiene una solución para el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "coredns",
          "product": "coredns",
          "versions": [
            {
              "version": ">= 1.2.0, < 1.12.4",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-10T14:26:10.971285Z",
          "id": "CVE-2025-58063",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-681"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/coredns/coredns/commit/e1768a5d272e9da649dfb8588595e5c6e4e640bf",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}