Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-7008

Опубликовано: 23 дек. 2023
Источник: nvd
CVSS3: 5.9
EPSS Низкий

Описание

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:systemd_project:systemd:25:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00295
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-300
NVD-CWE-Other

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 1 года назад

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

CVSS3: 5.9
redhat
больше 2 лет назад

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

CVSS3: 5.9
msrc
около 1 месяца назад

Описание отсутствует

CVSS3: 5.9
debian
больше 1 года назад

A vulnerability was found in systemd-resolved. This issue may allow sy ...

suse-cvrf
12 месяцев назад

Security update for systemd

EPSS

Процентиль: 52%
0.00295
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-300
NVD-CWE-Other