A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemdUpgrade systemd-rpm-macrosUpgrade rhel-net-naming-sysattrsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-oomdUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-boot-unsigned | May 8, 2024 | Dec 23, 2023 |
| Amazon_linux_2023 | — | Upgrade systemd-boot-unsignedUpgrade systemd-tests-debuginfoUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-networkdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-oomd-defaultsUpgrade systemd-libsUpgrade systemd-networkd-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-testsUpgrade systemd-container-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-standalone-tmpfilesUpgrade systemdUpgrade systemd-standalone-sysusersUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-debugsource | Feb 17, 2025 | Dec 8, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-networkdUpgrade systemd | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-networkdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemdUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-nspawn | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-udevUpgrade systemd-nspawnUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-networkd | May 31, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-develUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-libsUpgrade systemdUpgrade systemd-container | Jul 24, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd | Apr 9, 2024 | Dec 23, 2023 |
| Oracle_linux | — | Upgrade systemd-oomdUpgrade systemd-pamUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-boot-unsignedUpgrade systemd-containerUpgrade rhel-net-naming-sysattrsUpgrade systemd-rpm-macros | May 7, 2024 | Dec 8, 2022 |
| Redhat_linux | — | Upgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-resolved-debuginfoUpgrade systemd-pamUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pam-debuginfoUpgrade rhel-net-naming-sysattrsUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-oomdUpgrade systemd-testsUpgrade systemd-oomd-debuginfoUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-boot-unsignedUpgrade systemd | May 1, 2024 | Dec 23, 2023 |
| Rocky_linux | — | Upgrade systemd-boot-unsigned-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-resolvedUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-resolved-debuginfoUpgrade systemd-oomdUpgrade systemd-testsUpgrade systemd-boot-unsignedUpgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-udevUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-udev-debuginfo | May 13, 2024 | Dec 23, 2023 |
| Ubuntu | — | Upgrade libnss-resolveUpgrade libudev1Upgrade udevUpgrade libsystemd0Upgrade systemd | Nov 19, 2024 | Dec 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Dec 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub