Bug 1219167 (CVE-2024-0874)

Summary:	VUL-0: CVE-2024-0874: coredns: CD bit response is cached and served later
Product:	[openSUSE] openSUSE Distribution	Reporter:	SMASH SMASH <smash_bz>
Component:	Security	Assignee:	Andrea Manzini <andrea.manzini>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	gianluca.gabrielli
Version:	Leap 15.6
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/392160/
Whiteboard:
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description SMASH SMASH 2024-01-25 07:40:42 UTC

Coredns mishandling of CI bit: CD bit response is cached and served later

What happened:
If CD bit is set in query, it disables validation at remote server

What you expected to happen:
CD queries may pass, but the same answer must not be served to queries without CD bit set

https://github.com/coredns/coredns/issues/6186

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-0874
https://bugzilla.redhat.com/show_bug.cgi?id=2219234

Comment 1 Gianluca Gabrielli 2024-01-25 07:42:30 UTC

Affected packages:
 - openSUSE:Backports:SLE-15-SP5/coredns
 - openSUSE:Backports:SLE-15-SP4/coredns
 - openSUSE:Factory/coredns

Fixing commit here [0], at this time it doesn't seems to be part of any official release.

--
[0] https://github.com/coredns/coredns/commit/997c7f953962d47c242273f0e41398fdfb5b0151

Comment 2 Andrea Manzini 2024-01-25 11:09:23 UTC

included patch in the package, submitted with 

https://build.opensuse.org/request/show/1141487

Comment 3 Andrea Manzini 2024-01-25 11:19:47 UTC

build failed; new request submitted https://build.opensuse.org/request/show/1141493

Comment 4 Andrea Manzini 2024-02-05 06:52:37 UTC

fixed with upstream patch