CVE-2022-2835 - AskarLabs CVE Database

CVE-2022-2835

Vendor N/A

Product coreDNS

Weakness CWE-923

Published March 3, 2023

Last update March 7, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

Key dates

02Disclosure timeline

March 3, 2023 CVE published

March 7, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2835 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/923.html

Related vulnerabilities

04Related CVE

CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager CVE-2022-43916 IBM App Connect Enterprise Certified Container improper communications restriction CVE-2024-39537 Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability CVE-2017-3891