Affected by GO-2022-0368
and 5 other vulnerabilities
GO-2022-0368: Improper random number generation in github.com/coredns/coredns
GO-2024-3130: CoreDNS vulnerable to TuDoor Attacks in github.com/coredns/coredns
GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns
GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns
GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns
GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns
root - simply specifies the root of where to find (zone) files.
Description
The default root is the current working directory of CoreDNS. The root plugin allows you to change
this. A relative root path is relative to the current working directory.
Syntax
root PATH
PATH is the directory to set as CoreDNS' root.
Examples
Serve zone data (when the file plugin is used) from /etc/coredns/zones: