A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-boot-unsignedUpgrade systemd-testsUpgrade systemd-oomdUpgrade systemd-rpm-macrosUpgrade systemd-develUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-resolvedUpgrade rhel-net-naming-sysattrs | May 8, 2024 | Dec 23, 2023 |
| Amazon_linux_2023 | — | Upgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-standalone-tmpfilesUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-standalone-sysusersUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-rpm-macrosUpgrade systemd-resolved-debuginfoUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-resolvedUpgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-containerUpgrade systemd-boot-unsignedUpgrade systemd-oomd-defaultsUpgrade systemd-networkdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-networkd-debuginfoUpgrade systemd-libs | Feb 17, 2025 | Dec 8, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-networkdUpgrade systemdUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-timesyncd | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-udev-compatUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-nspawnUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd | Mar 13, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-libsUpgrade systemdUpgrade systemd-timesyncdUpgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-networkd | May 31, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd | Jul 24, 2024 | Dec 23, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-libsUpgrade systemdUpgrade systemd-container | Apr 9, 2024 | Dec 23, 2023 |
| Oracle_linux | — | Upgrade systemd-libsUpgrade systemd-boot-unsignedUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-rpm-macrosUpgrade rhel-net-naming-sysattrsUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-pamUpgrade systemd-oomdUpgrade systemd-develUpgrade systemd-resolved | May 7, 2024 | Dec 8, 2022 |
| Redhat_linux | — | Upgrade systemd-containerUpgrade systemd-boot-unsignedUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-oomd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-oomdUpgrade systemd-debuginfoUpgrade systemd-testsUpgrade systemdUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolvedUpgrade systemd-debugsourceUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-boot-unsigned-debuginfoUpgrade rhel-net-naming-sysattrsUpgrade systemd-container-debuginfoUpgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-tests-debuginfo | May 1, 2024 | Dec 23, 2023 |
| Rocky_linux | — | Upgrade systemdUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-udev-debuginfoUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-oomdUpgrade systemd-testsUpgrade systemd-pam-debuginfoUpgrade systemd-boot-unsignedUpgrade systemd-resolved-debuginfoUpgrade systemd-debugsourceUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-boot-unsigned-debuginfo | May 13, 2024 | Dec 23, 2023 |
| Ubuntu | — | Upgrade libudev1Upgrade libnss-resolveUpgrade udevUpgrade systemdUpgrade libsystemd0 | Nov 19, 2024 | Dec 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Dec 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub