Lucene search
GoogleOSV:GHSA-MMWX-RJ87-VFGRHistoryJul 22, 2024 - 2:46 p.m.
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
2024-07-2214:46:59
Google
osv.dev
8
dnsjava
keytrap
nsec3
cpu exhaustion
validatingresolver
dnssec
upgrade
dnsjava v3.6.0
non-validating resolver
vulnerability
AI Score
7.1
Confidence
High
Impact
Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones.
Patches
Users should upgrade to dnsjava v3.6.0
Workarounds
Although not recommended, only using a non-validating resolver, will remove the vulnerability.
References
Related
veracode
veracode
Denial Of Service
2024-02-15 02:59:19
ibm
ibm
githubexploit
githubexploit
Exploit for CVE-2023-50868
2024-03-19 16:13:14
nvd
nvd
CVE-2023-50868
2024-02-14 16:15:45
cgr
cgr
CVE-2023-50868 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2023-50868
2024-02-14 16:15:45
cbl_mariner
cbl_mariner
CVE-2023-50868 affecting package unbound for versions less than 1.19.1-1
2024-08-25 15:13:42
CVE-2023-50868 affecting package unbound for versions less than 1.19.1-1
2024-03-05 17:52:42
redhatcve
redhatcve
CVE-2023-50868
2024-02-13 20:27:25
f5
f5
K000139084: DNS vulnerability CVE-2023-50868
2024-03-28 00:00:00
cve
cve
CVE-2023-50868
2024-02-14 16:15:45
ubuntucve
ubuntucve
CVE-2023-50868
2024-02-13 00:00:00
nessus
nessus
cvelist
cvelist
CVE-2023-50868
2024-02-14 00:00:00
osv
osv
CVE-2023-50868
2024-02-14 16:15:45
CGA-4xfg-rxx4-hg89
2024-06-06 12:23:51
Important: dnsmasq security update
2024-03-14 00:00:00
debiancve
debiancve
CVE-2023-50868
2024-02-14 16:15:45
wolfi
wolfi
CVE-2023-50868 vulnerabilities
2024-09-19 09:11:50
prion
prion
Code injection
2024-02-14 16:15:00
mscve
mscve
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU
2024-06-11 07:00:00
redos
redos
ROS-20240701-02
2024-07-01 00:00:00
ROS-20240410-09
2024-04-10 00:00:00
debian
debian
[SECURITY] [DSA 5626-1] pdns-recursor security update
2024-02-18 16:35:24
[SECURITY] [DLA 3816-1] bind9 security update
2024-05-17 18:05:06
[SECURITY] [DSA 5620-1] unbound security update
2024-02-14 06:49:32
cloudlinux
cloudlinux
bind: Fix of 2 CVEs
2024-03-14 17:26:05
openvas
openvas
Fedora: Security Advisory for dnsmasq (FEDORA-2024-e00eceb11c)
2024-02-29 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1923)
2024-07-16 00:00:00
redhat
redhat
(RHSA-2024:1522) Important: dnsmasq security update
2024-03-26 12:26:32
(RHSA-2024:0965) Important: unbound security update
2024-02-26 00:56:26
(RHSA-2024:0981) Important: unbound security update
2024-02-26 09:13:42
fedora
fedora
[SECURITY] Fedora 38 Update: pdns-recursor-4.8.6-1.fc38
2024-02-23 01:32:18
[SECURITY] Fedora 39 Update: unbound-1.19.1-2.fc39
2024-02-18 00:55:50
[SECURITY] Fedora 39 Update: pdns-recursor-4.9.3-1.fc39
2024-02-23 01:24:47
ubuntu
ubuntu
Unbound vulnerabilities
2024-02-28 00:00:00
Bind vulnerabilities
2024-04-09 00:00:00
oraclelinux
oraclelinux
unbound security update
2024-02-28 00:00:00
unbound security update
2024-02-28 00:00:00
dnsmasq security update
2024-03-15 00:00:00
freebsd
freebsd
powerdns-recursor -- Multiple Vulnerabilities
2024-02-14 00:00:00
amazon
amazon
Important: unbound
2024-02-29 10:03:00
Important: bind
2024-04-24 22:15:00
almalinux
almalinux
Important: dnsmasq security update
2024-03-14 00:00:00
Important: dnsmasq security update
2024-03-14 00:00:00
Important: unbound security update
2024-02-26 00:00:00
rocky
rocky
dnsmasq security update
2024-03-27 04:34:32
akamaiblog
akamaiblog
mageia
mageia
Updated unbound packages fix security vulnerabilities
2024-02-17 03:55:07
Updated dnsmasq packages fix security vulnerabilities
2024-02-18 04:49:05
slackware
slackware
[slackware-security] dnsmasq
2024-02-14 04:22:19
cloudfoundry
cloudfoundry
USN-6665-1: Unbound vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-24:03.unbound
2024-03-28 00:00:00