A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-testsUpgrade systemd-boot-unsignedUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade rhel-net-naming-sysattrsUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-udevUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-oomdUpgrade systemd-rpm-macros | May 8, 2024 | Dec 23, 2023 |
| Amazon_linux_2023 | — | Upgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-networkdUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-oomd-defaultsUpgrade systemd-develUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-networkd-debuginfoUpgrade systemd-boot-unsignedUpgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-resolved-debuginfoUpgrade systemdUpgrade systemd-debugsourceUpgrade systemd-standalone-sysusersUpgrade systemd-journal-remoteUpgrade systemd-rpm-macrosUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-standalone-tmpfilesUpgrade systemd-pam | Feb 17, 2025 | Dec 8, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-resolvedUpgrade systemd-pam | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-networkdUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-timesyncd | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-udevUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-networkdUpgrade systemd-udev-compatUpgrade systemd-pam | May 31, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-udev-compat | Jul 24, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemdUpgrade systemd-libsUpgrade systemd-container | Apr 9, 2024 | Dec 23, 2023 |
| Oracle_linux | — | Upgrade systemd-rpm-macrosUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-containerUpgrade rhel-net-naming-sysattrsUpgrade systemd-libsUpgrade systemd-boot-unsignedUpgrade systemd-journal-remoteUpgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-develUpgrade systemdUpgrade systemd-resolved | May 7, 2024 | Dec 8, 2022 |
| Redhat_linux | — | Upgrade systemdUpgrade systemd-rpm-macrosUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-boot-unsignedUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-libsUpgrade systemd-oomd-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolvedUpgrade systemd-udevUpgrade systemd-debuginfoUpgrade systemd-oomdUpgrade systemd-udev-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-debugsourceUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-container-debuginfoUpgrade rhel-net-naming-sysattrsUpgrade systemd-pam-debuginfo | May 1, 2024 | Dec 23, 2023 |
| Rocky_linux | — | Upgrade systemd-boot-unsigned-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-oomdUpgrade systemd-boot-unsignedUpgrade systemd-debugsourceUpgrade systemd-pam-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-testsUpgrade systemd-resolved-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd | May 13, 2024 | Dec 23, 2023 |
| Ubuntu | — | Upgrade udevUpgrade libudev1Upgrade libnss-resolveUpgrade systemdUpgrade libsystemd0 | Nov 19, 2024 | Dec 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Dec 23, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub