CVE-2023-50868

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

• Debian

  OS
  Debian
  10.011.0

• Fedora Project Fedora

  OS
  Fedoraproject
  3839

• Isc Bind

  APP
  Isc
  9.0.0 – 9.16.48 (bez)9.19.0 – 9.19.21 (bez)9.9.3 – 9.16.48 (bez)9.18.0 – 9.18.24 (bez)9.18.11 – 9.18.24 (bez)

• Netapp Active Iq Unified Manager

  APP
  Netapp
  wszystkie wersje

• Netapp Bootstrap Os

  OS
  Netapp
  wszystkie wersje

• Netapp H300s

  HW
  Netapp
  wszystkie wersje

• Netapp H410c

  HW
  Netapp
  wszystkie wersje

• Netapp H410s

  HW
  Netapp
  wszystkie wersje

• Netapp H500s

  HW
  Netapp
  wszystkie wersje

• Netapp H700s

  HW
  Netapp
  wszystkie wersje

• Netapp Hci Baseboard Management Controller

  APP
  Netapp
  wszystkie wersje

• Netapp Hci Compute Node

  HW
  Netapp
  wszystkie wersje

• Powerdns Recursor

  APP
  Powerdns
  5.0.0 – 5.0.2 (bez)4.9.0 – 4.9.3 (bez)< 4.8.5

• Red Hat Enterprise Linux

  OS
  Redhat
  6.07.08.08.28.4