vulnerability

CentOS Linux: CVE-2023-50868: Important: bind, bind-dyndb-ldap, and dhcp security update (CESA-2024:3741)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
02/14/2024
Added
06/11/2024
Modified
02/18/2025

Description

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Solution(s)

centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-develcentos-upgrade-bind-dyndb-ldapcentos-upgrade-bind-dyndb-ldap-debuginfocentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utilscentos-upgrade-dhclientcentos-upgrade-dhcpcentos-upgrade-dhcp-commoncentos-upgrade-dhcp-debuginfocentos-upgrade-dhcp-develcentos-upgrade-dhcp-libs

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today