HIGH✓ PATCH🇬🇧 English

CVE-2023-50387

CVSS 7.5v3.1pub. 2024-02-14upd. 2025-11-04

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fedora Project Fedora
OS
Fedoraproject
39
Isc Bind
APP
Isc
9.19.0 – 9.19.209.18.0 – 9.18.229.0.0 – 9.16.46
Microsoft Windows Server 2008
OS
Microsoft
r2
Microsoft Windows Server 2012
OS
Microsoft
r2
Microsoft Windows Server 2016
OS
Microsoft
wszystkie wersje
Microsoft Windows Server 2019
OS
Microsoft
wszystkie wersje
Microsoft Windows Server 2022
OS
Microsoft
wszystkie wersje
Microsoft Windows Server 2022 23h2
OS
Microsoft
wszystkie wersje
Nic Knot Resolver
APP
Nic
< 5.71
Nlnetlabs Unbound
APP
Nlnetlabs
< 1.19.1
Powerdns Recursor
APP
Powerdns
4.8.0 – 4.8.6 (bez)4.9.0 – 4.9.3 (bez)5.0.0 – 5.0.2 (bez)
Red Hat Enterprise Linux
OS
Redhat
6.07.08.09.0
Thekelleys Dnsmasq
APP
Thekelleys
< 2.90