CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

• Fedora Project Fedora

  OS
  Fedoraproject
  39

• Isc Bind

  APP
  Isc
  9.19.0 – 9.19.209.18.0 – 9.18.229.0.0 – 9.16.46

• Microsoft Windows Server 2008

  OS
  Microsoft
  r2

• Microsoft Windows Server 2012

  OS
  Microsoft
  r2

• Microsoft Windows Server 2016

  OS
  Microsoft
  wszystkie wersje

• Microsoft Windows Server 2019

  OS
  Microsoft
  wszystkie wersje

• Microsoft Windows Server 2022

  OS
  Microsoft
  wszystkie wersje

• Microsoft Windows Server 2022 23h2

  OS
  Microsoft
  wszystkie wersje

• Nic Knot Resolver

  APP
  Nic
  < 5.71

• Nlnetlabs Unbound

  APP
  Nlnetlabs
  < 1.19.1

• Powerdns Recursor

  APP
  Powerdns
  4.8.0 – 4.8.6 (bez)4.9.0 – 4.9.3 (bez)5.0.0 – 5.0.2 (bez)

• Red Hat Enterprise Linux

  OS
  Redhat
  6.07.08.09.0

• Thekelleys Dnsmasq

  APP
  Thekelleys
  < 2.90