PT-2023-8454 · Systemd+9 · Systemd-Resolved+9

Agentoak · Publicado 2022-12-08 · Atualizado 2026-06-08 · CVE-2023-7008

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions systemd-resolved (affected versions not specified)

Description The issue is related to insufficient authentication checks of messages from DNS clients in the systemd-resolved service, which manages network connections and domain name resolutions. This may allow a remote attacker to modify DNS records protected by DNSSEC by sending specially crafted DNS requests. The vulnerability can also enable man-in-the-middle attackers or the upstream DNS resolver to manipulate records of DNSSEC-signed domains, even when these records lack a signature.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-300

Identificadores relacionados

ALSA-2024:2463

ALSA-2024:3203

ALT-PU-2024-1263

ALT-PU-2024-6023

AZL-32270

AZL-32271

AZL-35291

AZL-43171

BDU:2024-00853

CESA-2024_3203

CVE-2023-7008

DLA-3859-1

INFSA-2024_2463

INFSA-2024_3203

OESA-2024-1020

OESA-2024-2262

OPENSUSE-SU-2024:13665-1

OPENSUSE-SU-2024_3149-1

RHSA-2024:2463

RHSA-2024:3203

RHSA-2024_2463

RHSA-2024_3203

RLSA-2024:2463

SUSE-SU-2024:3149-1

SUSE-SU-2024_3149-1

USN-8402-1

Produtos afetados

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Systemd-Resolved

Referências · 64

• https://github.com/systemd/systemd/issues/25676 · Nota
• https://github.com/systemd/systemd/commit/3b4cc1437b51fcc0b08da8cc3f5d1175eed25eb1 · Nota
• https://github.com/systemd/systemd-stable/commit/029272750fe451aeaac87a8c783cfb067f001e16 · Nota
• https://github.com/systemd/systemd-stable/commit/6da5ca9dd69c0e3340d4439413718ad4963252de · Nota
• https://github.com/systemd/systemd-stable/commit/4ada1290584745ab6643eece9e1756a8c0e079ca · Nota
• https://github.com/systemd/systemd-stable/commit/bb78da7f955c0102047319c55fff9d853ab7c87a · Nota
• https://github.com/systemd/systemd-stable/commit/f58fc88678b893162f2d6d4b2db094e7b1646386 · Nota
• https://github.com/systemd/systemd-stable/commit/c8578cef7f0f1e8cb8193c29e5e77daf4e3a1c9f · Nota
• https://github.com/systemd/systemd-stable/commit/3a409b210396c6a0bef621349f4caa3a865940f2 · Nota
• https://github.com/systemd/systemd-stable/commit/5c149c77cbf7b3743fa65ce7dc9d2b5a58351968 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-7008 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-7008 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-7008 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8402-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-35291 · Aviso do Fabricante