{
  "cveId": "CVE-2025-58063",
  "url": "https://patchblox.com/security/cve/CVE-2025-58063",
  "summary": "CVE-2025-58063 is fixed in 2 products on 1 platform, first by SUSE-SU-2025:03289-1, released September 22, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion",
  "description": "This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc\n  * GO-2025-3956 CVE-2025-47906 CVE-2025-47906\n\n- Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9\n  * GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5\n  * GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8\n  * GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp\n  * GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x\n  * GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7\n  * GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98\n  * GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9\n  * GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w\n  * GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf\n  * GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp\n  * GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr\n  * GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf\n  * GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p\n  * GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg\n  * GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459\n  * GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv\n  * GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98\n  * GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2\n  * GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh\n  * GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f\n\n- Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4\n  * GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3\n  * GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56\n  * GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq\n  * GO-2025-3920 GHSA-vxg3-w9rv-rhr2\n  * GO-2025-3921 GHSA-3rw9-wmc8-8948\n  * GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j\n  * GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34\n  * GO-2025-3925 GHSA-v2ch-c8v8-fgr7\n  * GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h\n  * GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97\n  * GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff\n  * GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw\n  * GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5\n  * GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w",
  "published": "2025-09-11T06:01:49Z",
  "severity": "",
  "cvss": 7.1,
  "epss": 0.00506,
  "epssPercentile": 0.43518,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58063",
  "fixes": [
    {
      "platform": "linux",
      "product": "coredns",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.14.0-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:20099-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20099-1",
      "released": "2026-01-24T09:09:32Z"
    },
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.0.20250918T182144-150000.1.107.1",
      "fix": "SUSE-SU-2025:03289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03289-1",
      "released": "2025-09-22T10:16:10Z"
    },
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.0.20260723T184607-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21483-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21483-1",
      "released": "2026-07-30T09:09:47Z"
    },
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "sles 15.6",
      "fixedVersion": "0.0.20250918T182144-150000.1.107.1",
      "fix": "SUSE-SU-2025:03289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03289-1",
      "released": "2025-09-22T10:16:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}