UpHeron
All vulnerabilities

Servers and applications

CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of…

Severity
High 7.5
Published
14 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.19.1
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.0.0 up to 9.16.46
  • From 9.18.0 up to 9.18.22
  • From 9.19.0 up to 9.19.20
UnboundServers and applications · cpe:a:nlnetlabs:unbound
  • Every version before 1.19.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-50387
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-50387