Read the docs
TI-2023-27773 Aliases CVE-2023-50868GHSA-pv4h-p8jr-6cv2

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance…

Priority HIGH 77CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.74295 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 32 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*before 4.8.5; 4.9.0 to before 4.9.3; 5.0.0 to before 5.0.2VulnerablePowerDNS
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:* Versions before 4.8.5; 4.9.0 to before 4.9.3; 5.0.0 to before 5.0.2 Vulnerable ·PowerDNS
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*39VulnerableFedoraproject
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*9.0.0 to before 9.16.48VulnerableISC
cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:*9.9.3 to before 9.16.48VulnerableISC
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*9.18.0 to before 9.18.24VulnerableISC
cpe:2.3:a:isc:bind:*:s1:*:*:supported_preview:*:*:*9.18.11 to before 9.18.24VulnerableISC
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*9.19.0 to before 9.19.21VulnerableISC
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* Versions 9.0.0 to before 9.16.48 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:* Versions 9.9.3 to before 9.16.48 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* Versions 9.18.0 to before 9.18.24 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:*:s1:*:*:supported_preview:*:*:* Versions 9.18.11 to before 9.18.24 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* Versions 9.19.0 to before 9.19.21 Vulnerable ·ISC

Remediation

Red Hat 32 advisories

  • RHSA-2025:0039 Released 2025-01-06 · Red Hat rating Important
    bind and bind-dyndb-ldap security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) bind-32:9.8.2-0.68.rc1.el6_10.14, bind-chroot-32:9.8.2-0.68.rc1.el6_10.14, bind-dyndb-ldap-2.3-8.el6_10.1 +2
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) bind-devel-32:9.8.2-0.68.rc1.el6_10.14, bind-sdb-32:9.8.2-0.68.rc1.el6_10.14
  • RHSA-2024:11003 Released 2024-12-12 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) unbound-1.6.6-5.el7_9.1, unbound-libs-1.6.6-5.el7_9.1, unbound-libs-1.6.6-5.el7_9.1.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) unbound-devel-1.6.6-5.el7_9.1, unbound-devel-1.6.6-5.el7_9.1.ppc, unbound-python-1.6.6-5.el7_9.1
  • RHSA-2024:3929 Released 2024-06-13 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) dnsmasq-2.79-11.el8_2.3, dnsmasq-utils-2.79-11.el8_2.3
Show 29 more Red Hat advisories
  • RHSA-2024:3877 Released 2024-06-13 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) dnsmasq-2.79-15.el8_4.2, dnsmasq-utils-2.79-15.el8_4.2
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) dnsmasq-2.79-15.el8_4.2, dnsmasq-utils-2.79-15.el8_4.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) dnsmasq-2.79-15.el8_4.2, dnsmasq-utils-2.79-15.el8_4.2
  • RHSA-2024:3741 Released 2024-06-10 · Red Hat rating Important
    bind, bind-dyndb-ldap, and dhcp security update
    • Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-26.P2.el7_9.16, bind-export-libs-32:9.11.4-26.P2.el7_9.16, bind-libs-32:9.11.4-26.P2.el7_9.16 +7
    • Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.16, bind-chroot-32:9.11.4-26.P2.el7_9.16, bind-devel-32:9.11.4-26.P2.el7_9.16 +11
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.16, bind-chroot-32:9.11.4-26.P2.el7_9.16, bind-devel-32:9.11.4-26.P2.el7_9.16 +11
    • Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-26.P2.el7_9.16, bind-chroot-32:9.11.4-26.P2.el7_9.16, bind-dyndb-ldap-11.1-7.el7_9.1 +17
    • Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.16, bind-devel-32:9.11.4-26.P2.el7_9.16.ppc, bind-export-devel-32:9.11.4-26.P2.el7_9.16 +9
    • Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-26.P2.el7_9.16, bind-chroot-32:9.11.4-26.P2.el7_9.16, bind-dyndb-ldap-11.1-7.el7_9.1 +12
    • Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.16, bind-export-devel-32:9.11.4-26.P2.el7_9.16, bind-lite-devel-32:9.11.4-26.P2.el7_9.16 +4
  • RHSA-2024:3271 Released 2024-05-22 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-14.el8_10, bind-chroot-32:9.11.36-14.el8_10, bind-devel-32:9.11.36-14.el8_10 +12
    • Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-14.el8_10, bind-export-devel-32:9.11.36-14.el8_10, bind-export-libs-32:9.11.36-14.el8_10
  • RHSA-2024:2890 Released 2024-05-16 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) bind-32:9.11.13-6.el8_2.7, bind-chroot-32:9.11.13-6.el8_2.7, bind-devel-32:9.11.13-6.el8_2.7 +12
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bind-32:9.11.13-6.el8_2.7, bind-export-devel-32:9.11.13-6.el8_2.7, bind-export-libs-32:9.11.13-6.el8_2.7 +6
  • RHSA-2024:2821 Released 2024-05-13 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-chroot-32:9.11.26-4.el8_4.4, bind-devel-32:9.11.26-4.el8_4.4 +12
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-chroot-32:9.11.26-4.el8_4.4, bind-devel-32:9.11.26-4.el8_4.4 +12
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-chroot-32:9.11.26-4.el8_4.4, bind-devel-32:9.11.26-4.el8_4.4 +12
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-export-devel-32:9.11.26-4.el8_4.4, bind-export-libs-32:9.11.26-4.el8_4.4 +6
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-export-devel-32:9.11.26-4.el8_4.4, bind-export-libs-32:9.11.26-4.el8_4.4 +6
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) bind-32:9.11.26-4.el8_4.4, bind-export-devel-32:9.11.26-4.el8_4.4, bind-export-libs-32:9.11.26-4.el8_4.4 +6
  • RHSA-2024:2721 Released 2024-05-07 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) bind-32:9.11.36-8.el8_8.4, bind-chroot-32:9.11.36-8.el8_8.4, bind-devel-32:9.11.36-8.el8_8.4 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) bind-32:9.11.36-8.el8_8.4, bind-export-devel-32:9.11.36-8.el8_8.4, bind-export-libs-32:9.11.36-8.el8_8.4 +6
  • RHSA-2024:2720 Released 2024-05-07 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) bind-32:9.11.36-3.el8_6.7, bind-chroot-32:9.11.36-3.el8_6.7, bind-devel-32:9.11.36-3.el8_6.7 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bind-32:9.11.36-3.el8_6.7, bind-export-devel-32:9.11.36-3.el8_6.7, bind-export-libs-32:9.11.36-3.el8_6.7 +6
  • RHSA-2024:2696 Released 2024-05-06 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
  • RHSA-2024:2587 Released 2024-04-30 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
  • RHSA-2024:2551 Released 2024-04-30 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream (v. 9) bind-32:9.16.23-18.el9_4.1, bind-chroot-32:9.16.23-18.el9_4.1, bind-dnssec-doc-32:9.16.23-18.el9_4.1 +6
    • Red Hat Enterprise Linux CRB (v. 9) bind-devel-32:9.16.23-18.el9_4.1, bind-doc-32:9.16.23-18.el9_4.1, bind-libs-32:9.16.23-18.el9_4.1
  • RHSA-2024:1803 Released 2024-04-15 · Red Hat rating Important
    bind and bind-dyndb-ldap security updates
    • Red Hat CodeReady Linux Builder EUS (v.9.2) bind-devel-32:9.16.23-11.el9_2.4, bind-doc-32:9.16.23-11.el9_2.4, bind-libs-32:9.16.23-11.el9_2.4
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) bind-32:9.16.23-11.el9_2.4, bind-chroot-32:9.16.23-11.el9_2.4, bind-dnssec-doc-32:9.16.23-11.el9_2.4 +6
  • RHSA-2024:1804 Released 2024-04-15 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) python3-unbound-1.7.3-17.el8_6.4, unbound-1.7.3-17.el8_6.4, unbound-devel-1.7.3-17.el8_6.4 +1
  • RHSA-2024:1800 Released 2024-04-15 · Red Hat rating Important
    bind and bind-dyndb-ldap security updates
    • Red Hat CodeReady Linux Builder EUS (v.9.0) bind-devel-32:9.16.23-1.el9_0.5, bind-libs-32:9.16.23-1.el9_0.5
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) bind-32:9.16.23-1.el9_0.5, bind-chroot-32:9.16.23-1.el9_0.5, bind-dnssec-doc-32:9.16.23-1.el9_0.5 +6
  • RHSA-2024:1801 Released 2024-04-15 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) python3-unbound-1.13.1-13.el9_0.4, unbound-1.13.1-13.el9_0.4, unbound-libs-1.13.1-13.el9_0.4
  • RHSA-2024:1782 Released 2024-04-12 · Red Hat rating Important
    bind and dhcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-11.el8_9.1, bind-chroot-32:9.11.36-11.el8_9.1, bind-devel-32:9.11.36-11.el8_9.1 +12
    • Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-11.el8_9.1, bind-export-devel-32:9.11.36-11.el8_9.1, bind-export-libs-32:9.11.36-11.el8_9.1
  • RHSA-2024:1789 Released 2024-04-11 · Red Hat rating Important
    bind security update
    • Red Hat CodeReady Linux Builder (v. 9) bind-devel-32:9.16.23-14.el9_3.4, bind-doc-32:9.16.23-14.el9_3.4, bind-libs-32:9.16.23-14.el9_3.4
    • Red Hat Enterprise Linux AppStream (v. 9) bind-32:9.16.23-14.el9_3.4, bind-chroot-32:9.16.23-14.el9_3.4, bind-dnssec-doc-32:9.16.23-14.el9_3.4 +6
  • RHSA-2024:1781 Released 2024-04-11 · Red Hat rating Important
    bind9.16 security update
    • Red Hat CodeReady Linux Builder (v. 8) bind9.16-devel-32:9.16.23-0.16.el8_9.2, bind9.16-doc-32:9.16.23-0.16.el8_9.2, bind9.16-libs-32:9.16.23-0.16.el8_9.2
    • Red Hat Enterprise Linux AppStream (v. 8) bind9.16-32:9.16.23-0.16.el8_9.2, bind9.16-chroot-32:9.16.23-0.16.el8_9.2, bind9.16-dnssec-utils-32:9.16.23-0.16.el8_9.2 +4
  • RHSA-2024:1648 Released 2024-04-02 · Red Hat rating Important
    bind9.16 security update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) bind9.16-devel-32:9.16.23-0.14.el8_8.4, bind9.16-doc-32:9.16.23-0.14.el8_8.4, bind9.16-libs-32:9.16.23-0.14.el8_8.4
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) bind9.16-32:9.16.23-0.14.el8_8.4, bind9.16-chroot-32:9.16.23-0.14.el8_8.4, bind9.16-dnssec-utils-32:9.16.23-0.14.el8_8.4 +4
  • RHSA-2024:1647 Released 2024-04-02 · Red Hat rating Important
    bind9.16 security update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) bind9.16-devel-32:9.16.23-0.7.el8_6.5, bind9.16-dnssec-utils-32:9.16.23-0.7.el8_6.5, bind9.16-doc-32:9.16.23-0.7.el8_6.5 +2
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) bind9.16-32:9.16.23-0.7.el8_6.5, bind9.16-chroot-32:9.16.23-0.7.el8_6.5, bind9.16-libs-32:9.16.23-0.7.el8_6.5 +2
  • RHSA-2024:1545 Released 2024-03-27 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) dnsmasq-2.79-21.el8_6.5, dnsmasq-utils-2.79-21.el8_6.5
  • RHSA-2024:1544 Released 2024-03-27 · Red Hat rating Important
    dnsmasq security and bug fix update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) dnsmasq-2.79-26.el8_8.4, dnsmasq-utils-2.79-26.el8_8.4
  • RHSA-2024:1543 Released 2024-03-27 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) dnsmasq-2.85-3.el9_0.1, dnsmasq-utils-2.85-3.el9_0.1
  • RHSA-2024:1522 Released 2024-03-26 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) dnsmasq-2.85-6.el9_2.3, dnsmasq-utils-2.85-6.el9_2.3
  • RHSA-2024:1335 Released 2024-03-14 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream (v. 8) dnsmasq-2.79-31.el8_9.2, dnsmasq-utils-2.79-31.el8_9.2
  • RHSA-2024:1334 Released 2024-03-14 · Red Hat rating Important
    dnsmasq security update
    • Red Hat Enterprise Linux AppStream (v. 9) dnsmasq-2.85-14.el9_3.1, dnsmasq-utils-2.85-14.el9_3.1
  • RHSA-2024:0982 Released 2024-02-27 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) python3-unbound-1.16.2-5.el8_8.1, unbound-1.16.2-5.el8_8.1, unbound-devel-1.16.2-5.el8_8.1 +1
  • RHSA-2024:0981 Released 2024-02-26 · Red Hat rating Important
    unbound security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) unbound-devel-1.16.2-3.el9_2.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) python3-unbound-1.16.2-3.el9_2.1, unbound-1.16.2-3.el9_2.1, unbound-libs-1.16.2-3.el9_2.1
  • RHSA-2024:0977 Released 2024-02-26 · Red Hat rating Important
    unbound security update
    • Red Hat CodeReady Linux Builder (v. 9) unbound-devel-1.16.2-3.el9_3.1
    • Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.16.2-3.el9_3.1, unbound-1.16.2-3.el9_3.1, unbound-libs-1.16.2-3.el9_3.1
  • RHSA-2024:0965 Released 2024-02-26 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.el8_9.2, unbound-1.16.2-5.el8_9.2, unbound-devel-1.16.2-5.el8_9.2 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2024:1781
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2024:0977, RHSA-2024:1789
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2024:1647
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2024:1648
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2024:1800
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2024:0981, RHSA-2024:1803
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:0965, RHSA-2024:1335, RHSA-2024:1781, RHSA-2024:1782, RHSA-2024:3271
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:0977, RHSA-2024:1334, RHSA-2024:1789, RHSA-2024:2551
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2024:2696, RHSA-2024:2890, RHSA-2024:3929
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:2587, RHSA-2024:2821, RHSA-2024:3877
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2024:2696
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:2587, RHSA-2024:2821, RHSA-2024:3877
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:1545, RHSA-2024:1647, RHSA-2024:1804, RHSA-2024:2720
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:0982, RHSA-2024:1544, RHSA-2024:1648, RHSA-2024:2721
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:1543, RHSA-2024:1800, RHSA-2024:1801
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:0981, RHSA-2024:1522, RHSA-2024:1803
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2024:2696
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:2587, RHSA-2024:2821, RHSA-2024:3877
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:1782, RHSA-2024:3271
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2024:2890
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2024:2821
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2024:2821
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:2720
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:2721
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2024:2821
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2024:2551
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2024:11003
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:0039
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2024:11003
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:0039
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:3741
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2024:3741
Not affected: 4 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux BaseOS (v. 8)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-50868
  2. 2026-10-03 Alias added: GHSA-pv4h-p8jr-6cv2

References

Exploit 1

Advisory 21

Other 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences