Vulnerabilities > CVE-2023-7008 - Unspecified vulnerability in Systemd Project Systemd 25

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
high complexity
systemd-project
NVD
Published: 2023-12-23
Updated: 2024-05-22

Summary

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Vulnerable Configurations

Part Description Count
Application
Systemd_Project
1
OS
Debian
2

References