https://seclists.org/oss-sec/2024/q1/127: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities
Published Feb 13, 2024
·Updated
Affected Software
1 affected component
thekelleys dnsmasq
Frequently Asked Questions
1
What are the vulnerabilities identified in CVE-2023-50387 and CVE-2023-50868?
CVE-2023-50387 and CVE-2023-50868 are DNSSEC validation vulnerabilities that can cause Denial of Service attacks on DNSSEC validators.
2
What is the impact of CVE-2023-50387 on DNSSEC validators?
CVE-2023-50387 can render DNSSEC validators unable to process specially crafted DNSSEC responses, leading to service disruptions.
3
How can I mitigate the risks associated with CVE-2023-50387?
To mitigate the risks of CVE-2023-50387, update your DNS software to the latest version that includes patches for these vulnerabilities.
4
Is CVE-2023-50387 related to any specific DNS software?
CVE-2023-50387 affects various DNSSEC validators, including the DNS server software provided by TheKelleys dnsmasq.
5
When were CVE-2023-50387 and CVE-2023-50868 published?
CVE-2023-50387 and CVE-2023-50868 were publicly disclosed on February 13, 2024.