AZL-35329
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35329.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-35329
- Upstream
- Published
- 2024-02-14T16:15:45Z
- Modified
- 2026-04-01T05:12:55.542828Z
- Summary
- CVE-2023-50868 affecting package unbound for versions less than 1.19.1-1
- Details
-
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
- References