https://seclists.org/oss-sec/2024/q1/129: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities
Published Feb 13, 2024
·Updated
Affected Software
2 affected components
PowerDNS PowerDNS
Dnsmasq Dnsmasq
Frequently Asked Questions
1
What is the severity of CVE-2023-50387?
CVE-2023-50387 is classified as a medium severity vulnerability affecting DNSSEC validation.
2
How do I fix CVE-2023-50387?
To fix CVE-2023-50387, update your PowerDNS or Dnsmasq installations to the latest versions that address this vulnerability.
3
What impact does CVE-2023-50387 have on DNSSEC?
CVE-2023-50387 allows for potential disclosure of sensitive information due to flawed DNSSEC validation.
4
Are there any workarounds for CVE-2023-50387?
While the best practice is to update your software, temporarily disabling DNSSEC validation may serve as a workaround until a patch is applied.
5
What systems are affected by CVE-2023-50868?
CVE-2023-50868 affects both PowerDNS and Dnsmasq implementations that utilize DNSSEC.