CVE-2023-50868

Katalog CVE

CVSS 7.5 · High EPSS 73,7%

Kerentanan Uncontrolled Resource Consumption pada netapp hci baseboard management controller, netapp active iq unified manager +6 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Rincian

Terbit di NVD

14 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

73,7% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-50868 advisory vendor
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html advisory vendor
• https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html mailing list · advisory vendor
• https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UH... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXK... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5J... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7N... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUST... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCID... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JE... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7... mailing list · advisory vendor
• https://security.netapp.com/advisory/ntap-20240307-0008/ advisory vendor
• https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html mailing list · advisory vendor
• https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLX... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKP... mailing list · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY... mailing list · advisory vendor
• https://www.isc.org/blogs/2024-bind-security-release/ exploit · mitigasi · press/media coverage
• https://kb.isc.org/docs/cve-2023-50868 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/02/16/2 issue tracking · mailing list
• http://www.openwall.com/lists/oss-security/2024/02/16/3 issue tracking · mailing list
• https://bugzilla.suse.com/show_bug.cgi?id=1219826 issue tracking