Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the systemd-resolved service responsible for managing network connections and domain name resolution allows attackers to modify DNS records protected by DNSSEC, by gaining access to a channel from a non-endpoint location.

🗓️ 31 Jan 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Systemd-resolved flaw allows altering domain name system records via crafted queries.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.
17 Jun 202411:59
–ibm
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to Channel Accessible by Non-Endpoint in the RHEL UBI (CVE-2023-7008)
27 Jun 202519:53
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
15 Apr 202503:11
–ibm
IBM Security Bulletins		Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
23 Aug 202409:49
–ibm
Tenable Nessus		Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2024-509)
6 Feb 202400:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0258: systemd (ALINUX3-SA-2024:0258)
14 May 202500:00
–nessus
Tenable Nessus		CentOS 8 : systemd (CESA-2024:3203)
22 May 202400:00
–nessus
Tenable Nessus		Debian dla-3859 : libnss-myhostname - security update
2 Sep 202400:00
–nessus
Tenable Nessus		EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1230)
12 Mar 202400:00
–nessus
Tenable Nessus		EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1252)
12 Mar 202400:00
–nessus
Rows per page
SourceLink
altspwww.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhnwww.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.11.1/
githubwww.github.com/systemd/systemd/commit/3b4cc1437b51fcc0b08da8cc3f5d1175eed25eb1
githubwww.github.com/systemd/systemd-stable/commit/6da5ca9dd69c0e3340d4439413718ad4963252de
githubwww.github.com/systemd/systemd-stable/commit/029272750fe451aeaac87a8c783cfb067f001e16
githubwww.github.com/systemd/systemd-stable/commit/5c149c77cbf7b3743fa65ce7dc9d2b5a58351968
githubwww.github.com/systemd/systemd-stable/commit/bb78da7f955c0102047319c55fff9d853ab7c87a
githubwww.github.com/systemd/systemd-stable/commit/f58fc88678b893162f2d6d4b2db094e7b1646386
githubwww.github.com/systemd/systemd-stable/commit/4ada1290584745ab6643eece9e1756a8c0e079ca
githubwww.github.com/systemd/systemd-stable/commit/c8578cef7f0f1e8cb8193c29e5e77daf4e3a1c9f
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Nov 2024 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25.4
CVSS 35.9
EPSS0.00849
systemd-resolveddomain name systemcrafted queriesvulnerability
6