Affected by GO-2026-4630 and 6 other vulnerabilities

GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

edns

package

v1.14.1 Latest Latest Go to latest Published: Jan 16, 2026 License: Apache-2.0 Imports: 3 Imported by: 174

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coredns/coredns

Links

Documentation ¶

Overview ¶

Package edns provides function useful for adding/inspecting OPT records to/in messages.

Index ¶

func SetSupportedOption(option uint16)
func Size(proto string, size uint16) uint16
func SupportedOption(option uint16) bool
func Version(req *dns.Msg) (*dns.Msg, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func SetSupportedOption ¶ added in v1.3.0

func SetSupportedOption(option uint16)

SetSupportedOption adds a new supported option the set of EDNS0 options that we support. Plugins typically call this in their setup code to signal support for a new option. By default we support: dns.EDNS0NSID, dns.EDNS0EXPIRE, dns.EDNS0COOKIE, dns.EDNS0TCPKEEPALIVE, dns.EDNS0PADDING. These values are not in this map and checked directly in the server.

func Size ¶

func Size(proto string, size uint16) uint16

Size returns a normalized size based on proto.

func SupportedOption ¶ added in v1.3.0

func SupportedOption(option uint16) bool

SupportedOption returns true if the option code is supported as an extra EDNS0 option.

func Version ¶

func Version(req *dns.Msg) (*dns.Msg, error)

Version checks the EDNS version in the request. If error is nil everything is OK and we can invoke the plugin. If non-nil, the returned Msg is valid to be returned to the client (and should).

Types ¶

This section is empty.

Source Files ¶

View all Source files

edns.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL