https://seclists.org/oss-sec/2024/q1/128: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities
Published Feb 13, 2024
·Updated
Affected Software
2 affected components
Dnsmasq Dnsmasq
PowerDNS PowerDNS
Frequently Asked Questions
1
What is the severity of CVE-2023-50387?
CVE-2023-50387 has been classified with a severity level that indicates it can lead to denial of service attacks against DNSSEC validators.
2
How do I fix CVE-2023-50387?
To fix CVE-2023-50387, it is recommended to update your DNS resolver software to the latest version that addresses this vulnerability.
3
What impact does CVE-2023-50868 have on DNSSEC validation?
CVE-2023-50868 can also cause denial of service for systems attempting to validate specially crafted DNSSEC responses.
4
Which software is affected by CVE-2023-50387?
CVE-2023-50387 affects DNS resolver software including Dnsmasq and PowerDNS.
5
When were the vulnerabilities CVE-2023-50387 and CVE-2023-50868 disclosed?
CVE-2023-50387 and CVE-2023-50868 were disclosed on February 13, 2024.