Lucene search

CVE-2023-50387

🗓️ 14 Feb 2024 16:45:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 1180 Views🌐 29 Media mentions

Certain DNSSEC aspects of the DNS protocol allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	EulerOS 2.0 SP9 : bind (EulerOS-SA-2024-1481)	9 Apr 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-2112)	8 Aug 202400:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : DNS vulnerability (K000139092)	29 Mar 202400:00	–	nessus
Tenable Nessus	ISC BIND 9.0.0 < 9.16.48 / 9.9.3-S1 < 9.16.48-S1 / 9.18.0 < 9.18.24 / 9.18.11-S1 < 9.18.24-S1 / 9.19.0 < 9.19.21 Vulnerability (cve-2023-50387)	13 Feb 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : dnsmasq (EulerOS-SA-2024-1796)	3 Jun 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2024-2162)	21 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : systemd (EulerOS-SA-2024-2187)	20 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : bind (EulerOS-SA-2024-1502)	8 Apr 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : dnsmasq (EulerOS-SA-2024-1784)	3 Jun 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : dnsmasq (EulerOS-SA-2024-1724)	29 May 202400:00	–	nessus

Nvd

Node

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linuxMatch9.0

Node

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_server_2012Match-

microsoft windows_server_2012Matchr2

microsoft windows_server_2016Match-

microsoft windows_server_2019Match-

microsoft windows_server_2022Match-

microsoft windows_server_2022_23h2Match-

Node

fedoraproject fedoraMatch39

Node

thekelleys dnsmasqRange<2.90

Node

nic knot_resolverRange<5.71

Node

powerdns recursorRange4.8.0–4.8.6

powerdns recursorRange4.9.0–4.9.3

powerdns recursorRange5.0.0–5.0.2

Node

isc bindRange9.0.0–9.16.46-

isc bindRange9.18.0–9.18.22-

isc bindRange9.19.0–9.19.20-

Node

nlnetlabs unboundRange<1.19.1

Source	Link
isc	www.isc.org/blogs/2024-bind-security-release/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00011.html
theregister	www.theregister.com/2024/02/13/dnssec_vulnerability_internet/
access	www.access.redhat.com/security/cve/CVE-2023-50387
lists	www.lists.debian.org/debian-lts-announce/2024/02/msg00006.html
gitlab	www.gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
athene-center	www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
lists	www.lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Feb 2024 16:15Current

7.7High risk

Vulners AI Score7.7

CVSS37.5

EPSS0.046

CWE-770