Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC4

CVE-2023-50868

CVSS 3.1
7.5 high
EPSS
74%p99
Published
·
Modified
Analyze CVE-2023-50868 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Vendors
netapppowerdnsredhatdebianfedoraprojectisc
Products
hci baseboard management controller, active iq unified manager, bootstrap os, recursor, enterprise linux, debian linux, fedora, bind
Weakness
CWE-400
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (74.3%)

In the news

3 stories