Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44832
HistoryDec 26, 2023 - 6:18 a.m.

Man-in-the-Middle (MitM)

2023-12-2606:18:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
systemd
dnssec
vulnerability
man-in-the-middle

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

systemd:sid is vulneranble to Man-in-the-Middle (MitM). The vulnerability due to systemd-resolved accept records of DNSSEC-signed domains. It allows an attacker to manipulate records with out any signature.

Related

prion 1
openvas 18
almalinux 2
cve 1
nessus 25
debiancve 1
fedora 2
osv 7
cvelist 1
ubuntucve 1
oraclelinux 2
rocky 1
nvd 1
cbl_mariner 1
redhatcve 1
redhat 32
redos 1
ibm 8
prion
prion
Design/Logic Flaw
2023-12-23 13:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1230)
2024-03-12 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1327)
2024-03-13 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1499)
2024-04-08 00:00:00
almalinux
almalinux
Moderate: systemd security update
2024-04-30 00:00:00
Moderate: systemd security update
2024-05-22 00:00:00
cve
cve
CVE-2023-7008
2023-12-23 13:15:07
nessus
nessus
EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1252)
2024-03-12 00:00:00
EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2024-2066)
2024-07-25 00:00:00
EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2024-1622)
2024-05-15 00:00:00
debiancve
debiancve
CVE-2023-7008
2023-12-23 13:15:07
fedora
fedora
[SECURITY] Fedora 39 Update: systemd-254.8-2.fc39
2024-01-24 01:30:31
[SECURITY] Fedora 38 Update: systemd-253.15-2.fc38
2024-01-27 02:13:16
osv
osv
CVE-2023-7008
2023-12-23 13:15:07
Moderate: systemd security update
2024-04-30 00:00:00
Security update for systemd
2024-09-05 15:05:38
cvelist
cvelist
CVE-2023-7008 Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
2023-12-23 13:00:50
ubuntucve
ubuntucve
CVE-2023-7008
2023-12-23 00:00:00
oraclelinux
oraclelinux
systemd security update
2024-05-23 00:00:00
systemd security update
2024-05-03 00:00:00
rocky
rocky
systemd security update
2024-05-10 14:32:36
nvd
nvd
CVE-2023-7008
2023-12-23 13:15:07
cbl_mariner
cbl_mariner
CVE-2023-7008 affecting package systemd for versions less than 123
2024-09-27 09:12:43
redhatcve
redhatcve
CVE-2023-7008
2023-12-20 16:00:37
redhat
redhat
(RHSA-2024:2463) Moderate: systemd security update
2024-04-30 06:15:46
(RHSA-2024:3203) Moderate: systemd security update
2024-05-22 06:35:57
(RHSA-2024:3801) Moderate: OpenShift Container Platform 4.12.58 CNF vRAN extras security update
2024-06-11 14:50:24
redos
redos
ROS-20240425-05
2024-04-25 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.
2024-06-17 11:59:28
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
2024-08-23 09:49:16
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities
2024-06-26 12:12:00

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON
Related for VERACODE:44832
prion1openvas18almalinux2cve1nessus25debiancve1fedora2osv7cvelist1ubuntucve1oraclelinux2rocky1nvd1cbl_mariner1redhatcve1redhat32redos1ibm8