CVE-2023-7008 — Vulnerability intelligence

systemd project — systemd

Published: 2023-12-23T13:00:50.515Z

CVSS

5.9

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Sources

• CVE-2023-7008
• Original advisory
• Original advisory
• Vendor Advisory
• Issue Tracking
• Issue Tracking
• Issue Tracking
• Original advisory
• Original advisory
• Original advisory
• CVE-2023-7008