CVE-2023-7008 — Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in…
Published: 2023-12-23 · CVSS: 5.9 · CVSS 3.1
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7