Логотип exploitDog
bind:CVE-2023-50387
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-50387

Количество 37

Количество 37

ubuntu логотип

CVE-2023-50387

больше 1 года назад

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2023-50387

больше 1 года назад

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
EPSS: Средний
nvd логотип

CVE-2023-50387

больше 1 года назад

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
EPSS: Средний
msrc логотип

CVE-2023-50387

больше 1 года назад

MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers

EPSS: Средний
debian логотип

CVE-2023-50387

больше 1 года назад

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ...

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-8459-gg55-8qjj

больше 1 года назад

Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
EPSS: Средний
fstec логотип

BDU:2024-01359

больше 1 года назад

Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2025:0130-1

5 месяцев назад

Security update for dnsmasq

EPSS: Низкий
redos логотип

ROS-20240611-07

около 1 года назад

Уязвимость dnsmasq

CVSS3: 7.5
EPSS: Средний
rocky логотип

RLSA-2024:1335

около 1 года назад

Important: dnsmasq security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-1335

больше 1 года назад

ELSA-2024-1335: dnsmasq security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-1334

больше 1 года назад

ELSA-2024-1334: dnsmasq security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-11003

5 месяцев назад

ELSA-2024-11003: unbound security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-0977

больше 1 года назад

ELSA-2024-0977: unbound security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-0965

больше 1 года назад

ELSA-2024-0965: unbound security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2024:0048-1

больше 1 года назад

Security update for pdns-recursor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0071-1

5 месяцев назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1894-1

около 1 года назад

Security update for bind

EPSS: Низкий
rocky логотип

RLSA-2024:3271

около 1 года назад

Important: bind and dhcp security update

EPSS: Низкий
rocky логотип

RLSA-2024:1782

около 1 года назад

Important: bind and dhcp security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
40%
Средний
больше 1 года назад
redhat логотип
CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
40%
Средний
больше 1 года назад
nvd логотип
CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
40%
Средний
больше 1 года назад
msrc логотип
CVE-2023-50387

MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers

40%
Средний
больше 1 года назад
debian логотип
CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ...

CVSS3: 7.5
40%
Средний
больше 1 года назад
github логотип
GHSA-8459-gg55-8qjj

Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS3: 7.5
40%
Средний
больше 1 года назад
fstec логотип
BDU:2024-01359

Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
40%
Средний
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0130-1

Security update for dnsmasq

5 месяцев назад
redos логотип
ROS-20240611-07

Уязвимость dnsmasq

CVSS3: 7.5
40%
Средний
около 1 года назад
rocky логотип
RLSA-2024:1335

Important: dnsmasq security update

около 1 года назад
oracle-oval логотип
ELSA-2024-1335

ELSA-2024-1335: dnsmasq security update (IMPORTANT)

больше 1 года назад
oracle-oval логотип
ELSA-2024-1334

ELSA-2024-1334: dnsmasq security update (IMPORTANT)

больше 1 года назад
oracle-oval логотип
ELSA-2024-11003

ELSA-2024-11003: unbound security update (IMPORTANT)

5 месяцев назад
oracle-oval логотип
ELSA-2024-0977

ELSA-2024-0977: unbound security update (IMPORTANT)

больше 1 года назад
oracle-oval логотип
ELSA-2024-0965

ELSA-2024-0965: unbound security update (IMPORTANT)

больше 1 года назад
suse-cvrf логотип
openSUSE-SU-2024:0048-1

Security update for pdns-recursor

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0071-1

Security update for dnsmasq

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:1894-1

Security update for bind

около 1 года назад
rocky логотип
RLSA-2024:3271

Important: bind and dhcp security update

около 1 года назад
rocky логотип
RLSA-2024:1782

Important: bind and dhcp security update

около 1 года назад

Уязвимостей на страницу