CVE-2023-50868
HIGHCVSS 7.5/10EPSS 81.73%
Last modified
CVE-2023-50868 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.. EPSS estimates a 81.73% chance of exploitation in the next 30 days.
Description
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Netapp | Hci Baseboard Management Controller | All versions | — |
| Netapp | Active Iq Unified Manager | All versions | — |
| Netapp | Bootstrap Os | All versions | — |
| Powerdns | Recursor | < 4.8.5 | — |
| Powerdns | Recursor | >= 4.9.0, < 4.9.3 | — |
| Powerdns | Recursor | >= 5.0.0, < 5.0.2 | — |
| Redhat | Enterprise Linux | 6.0 | — |
| Redhat | Enterprise Linux | 7.0 | — |
| Redhat | Enterprise Linux | 8.0 | — |
| Redhat | Enterprise Linux | 8.2 | — |
| Redhat | Enterprise Linux | 8.4 | — |
| Debian | Debian Linux | 10.0 | — |
| Debian | Debian Linux | 11.0 | — |
| Fedoraproject | Fedora | 38 | — |
| Fedoraproject | Fedora | 39 | — |
| Isc | Bind | >= 9.0.0, < 9.16.48 | — |
| Isc | Bind | >= 9.9.3, < 9.16.48 | — |
| Isc | Bind | >= 9.18.0, < 9.18.24 | — |
| Isc | Bind | >= 9.18.11, < 9.18.24 | S1 |
| Isc | Bind | >= 9.19.0, < 9.19.21 | — |
References
- http://www.openwall.com/lists/oss-security/2024/02/16/2Issue Tracking, Mailing List
- http://www.openwall.com/lists/oss-security/2024/02/16/3Issue Tracking, Mailing List
- https://access.redhat.com/security/cve/CVE-2023-50868Vendor Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1219826Issue Tracking
- https://datatracker.ietf.org/doc/html/rfc5155Technical Description
- https://kb.isc.org/docs/cve-2023-50868Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/02/msg00006.htmlMailing List, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/05/msg00011.htmlMailing List, Vendor Advisory
- https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.htmlMailing List, Release Notes
- https://security.netapp.com/advisory/ntap-20240307-0008/Vendor Advisory
- https://www.isc.org/blogs/2024-bind-security-release/Exploit, Mitigation, Press/Media Coverage
- http://www.openwall.com/lists/oss-security/2024/02/16/2Issue Tracking, Mailing List
- http://www.openwall.com/lists/oss-security/2024/02/16/3Issue Tracking, Mailing List
- https://access.redhat.com/security/cve/CVE-2023-50868Vendor Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1219826Issue Tracking
- https://datatracker.ietf.org/doc/html/rfc5155Technical Description
- https://kb.isc.org/docs/cve-2023-50868Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/02/msg00006.htmlMailing List, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/05/msg00011.htmlMailing List, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00001.htmlMailing List, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/11/msg00035.htmlMailing List, Vendor Advisory
- https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.htmlMailing List, Release Notes
- https://security.netapp.com/advisory/ntap-20240307-0008/Vendor Advisory
- https://www.isc.org/blogs/2024-bind-security-release/Exploit, Mitigation, Press/Media Coverage
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-50868?
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
How severe is CVE-2023-50868?
CVE-2023-50868 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 81.73% probability of exploitation in the next 30 days.
How do I fix CVE-2023-50868?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-50862Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50863Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50864Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50865Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50866Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50867Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-5087The Page Builder: Pagelayer WordPress plugin before 1.7.8 do…5.4
- CVE-2023-50870In JetBrains TeamCity before 2023.11.1 a CSRF on login was p…8.8
- CVE-2023-50871In JetBrains YouTrack before 2023.3.22268 authorization chec…4.3
- CVE-2023-50872The API in Accredible Credential.net December 6th, 2023 allo…7.5
- CVE-2023-50873Cross-Site Request Forgery (CSRF) vulnerability in Marios Al…8.8
- CVE-2023-50874Improper Neutralization of Input During Web Page Generation …5.4
Are you affected by CVE-2023-50868?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST