Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian 11 DLA-3859-1 Critical: Systemd DNSSEC Issues and Fixes

debian lts
Calendar Grey September 2, 2024
Dist Debian Esm H88
To improve the security of your DNSSEC on Debian, be sure to upgrade systemd. Refer to advisory DLA-3859-1 for detailed info on vulnerabilities fixed and patch steps.
Multiple vulnerabilities have been fixed in systemd, the default init system in Debian, when using systemd-resolved with DNSSEC
Topics%20covered

Topics Covered

security advisory denial of service critical debian dnssec systemd

Summary

CVE-2023-7008

Don't accept records of DNSSEC-signed domains when they have no signature.

CVE-2023-50387

DNSSEC denial of service (CPU consumption)

CVE-2023-50868

DNSSEC denial of service (CPU consumption)

For Debian 11 bullseye, these problems have been fixed in version
247.3-7+deb11u6.

We recommend that you upgrade your systemd packages.

For the detailed security status of systemd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/systemd

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: systemd
Version: 247.3-7+deb11u6
CVE ID: CVE-2023-7008 CVE-2023-50387 CVE-2023-50868
Debian Bug: 1059278

Topics%20covered

Topics Covered

security advisory denial of service critical debian dnssec systemd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here