CVE-2023-50868

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-50868
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50868.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-50868
Downstream
Related
Published
2024-02-14T00:00:00Z
Modified
2026-05-14T06:48:15.482459068Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50868.json"
}
References

Affected packages

Git
github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d06e7e7e585e30b419e4e20815cb8233c48f7b1
Last affected
f8a0c0bed6ed629e314d22619510939c61d88b0e
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0"
        },
        {
            "last_affected": "8.0"
        }
    ],
    "cpe": [
        "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
    ]
}

Affected versions

Other
ondrej/008bfb6249a5f81d9e02ad4d39fda63fab57a0ad
ondrej/00ce93a69cd809810b82dbb229abf59d8e5850cc
ondrej/067f87f158b633e18a9c6fd0b038d1dc288bcb74
ondrej/074c7cc12c0eda40441926a8a96631c3176824a9
ondrej/1a1413ff5910ace7919bb8db0a1bb1f6e9c9ff7d
ondrej/2438db2eae8baf084615aff3b210ea51cd2f1fe1
ondrej/4098157e6ce98910ff99c58c41c6cf8069b79cc7
ondrej/4281aaab4503116fcf50caa348e1b5e7d414b742
ondrej/42e84e4b97be23f2b3754844e9d4478f48e92b48
ondrej/46caf5f4a4522d42480aee4d5949ea9546f98c2f
ondrej/4d292fc37ff5e99462756352c6028af7d0becf74
ondrej/4f369af51ede0e5ac7b3a14c451c5a41350a61cc
ondrej/53738634c3b511bd78e6626df95ae140631b080c
ondrej/6d06e7e7e585e30b419e4e20815cb8233c48f7b1
ondrej/6d1fdb850516a8d1fbfa853c56a1ef7627d54a72
ondrej/761b47a64845cb647d4fa3362be538eb0e7174d9
ondrej/840e56a979c3719ded668d5aaa04b1bddce465ef
ondrej/9cd2880a82f627bc44ab65fdaa19c2bcd9e61c96
ondrej/a42afbce2e34a5f990517fee7eab013c4adb8c0a
ondrej/a5f554959ec531712f6e14a8cb8c90d87cc27932
ondrej/b177581bb230d89821d1e2e5e91f93bee3fc4192
ondrej/b6298b394e9eaefcfa2458cd56c345d778e99b8e
ondrej/be1e6499742e241d71c7e79434e278a0c89d141b
ondrej/c63b7fad498dbe56710b655bd296a58abba64bb8
ondrej/d7e5f7903de06e504aac4a3822a41d69e159e370
ondrej/e00b13ac6e5a49434fbe534b0cab86b9ee4fbdb5
ondrej/f8a0c0bed6ed629e314d22619510939c61d88b0e
ondrej/fb07c38697c9f4f76dcb921487c4f96813c99b69
v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.15.0
v9.15.2
v9.15.3
v9.15.4
v9.15.7
v9.15.8
v9.19.0
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50868.json"
github.com/powerdns/pdns

Affected ranges

Type
GIT
Repo
https://github.com/powerdns/pdns
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a06ef30be67538e93f8cc08ccac78eaefbbfd4cc
Introduced
99d7f7a403baf29714a9f640c24f106c402c5891
Fixed
9a555d9e76e9078fccd7ac0d6cbfbd705be6ebfd
Introduced
d1499af06af5dfdff785e9b0595ee692074dba6e
Fixed
8cb2740c8468d48047cf40870e6373bdce833c60
Database specific 
{
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.8.5"
        },
        {
            "introduced": "4.9.0"
        },
        {
            "fixed": "4.9.3"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.0.2"
        }
    ]
}

Affected versions

auth-3.*
auth-3.1-rc1
auth-3.1-rc2
auth-3.1-rc3
auth-3.2-rc1
auth-3.2-rc2
auth-3.2-rc3
auth-3.2-rc4
auth-3.4.0
auth-3.4.0-rc1
auth-3.4.0-rc2
auth-4.*
auth-4.0.0
auth-4.0.0-alpha1
auth-4.0.0-alpha2
auth-4.0.0-alpha3
auth-4.0.0-beta1
auth-4.0.0-rc1
auth-4.0.0-rc2
auth-4.0.1
auth-4.1.0
auth-4.1.0-rc1
auth-4.1.0-rc2
auth-4.1.0-rc3
auth-4.2.0-alpha1
auth-4.2.0-beta1
auth-4.2.0-rc1
auth-4.2.0-rc2
auth-4.3.0-alpha1
auth-4.3.0-beta1
auth-4.3.0-beta2
auth-4.4.0-alpha0
auth-4.4.0-alpha1
auth-4.4.0-alpha2
auth-4.4.0-alpha3
auth-4.4.0-beta1
auth-4.5.0-alpha0
auth-4.5.0-alpha1
auth-4.5.0-beta1
auth-4.6.0-alpha0
auth-4.6.0-alpha1
auth-4.6.0-beta1
auth-4.7.0-alpha1
auth-4.8.0-alpha0
dnsdist-1.*
dnsdist-1.0.0
dnsdist-1.0.0-alpha1
dnsdist-1.0.0-alpha2
dnsdist-1.0.0-beta1
dnsdist-1.1.0
dnsdist-1.1.0-beta1
dnsdist-1.1.0-beta2
dnsdist-1.2.0
dnsdist-1.3.0
dnsdist-1.3.1
dnsdist-1.3.2
dnsdist-1.3.3
dnsdist-1.4.0
dnsdist-1.4.0-alpha1
dnsdist-1.4.0-alpha2
dnsdist-1.4.0-beta1
dnsdist-1.4.0-rc1
dnsdist-1.4.0-rc2
dnsdist-1.4.0-rc3
dnsdist-1.4.0-rc4
dnsdist-1.4.0-rc5
dnsdist-1.5.0
dnsdist-1.5.0-alpha1
dnsdist-1.5.0-rc1
dnsdist-1.5.0-rc2
dnsdist-1.5.0-rc3
dnsdist-1.5.0-rc4
dnsdist-1.6.0
dnsdist-1.6.0-alpha0
dnsdist-1.6.0-alpha1
dnsdist-1.6.0-alpha2
dnsdist-1.6.0-alpha3
dnsdist-1.6.0-rc1
dnsdist-1.6.0-rc2
dnsdist-1.7.0-alpha0
dnsdist-1.7.0-alpha1
dnsdist-1.7.0-alpha2
dnsdist-1.7.0-beta1
dnsdist-1.7.0-beta2
dnsdist-1.8.0-alpha0
Other
rec-3-0
rec-3-0-1
rec-3.*
rec-3.0
rec-3.0.1
rec-3.1.4
rec-3.3.1
rec-3.5
rec-3.5-rc1
rec-3.5-rc3
rec-3.5-rc4
rec-3.5-rc5
rec-3.6.0
rec-4.*
rec-4.0.0
rec-4.0.0-alpha1
rec-4.0.0-alpha2
rec-4.0.0-alpha3
rec-4.0.0-beta1
rec-4.0.0-rc1
rec-4.0.1
rec-4.0.2
rec-4.1.0
rec-4.1.0-alpha1
rec-4.1.0-rc1
rec-4.1.0-rc2
rec-4.1.0-rc3
rec-4.2.0-alpha1
rec-4.2.0-beta1
rec-4.2.0-rc1
rec-4.3.0-alpha1
rec-4.3.0-alpha2
rec-4.3.0-alpha3
rec-4.3.0-beta1
rec-4.4.0-alpha0
rec-4.4.0-alpha1
rec-4.4.0-alpha2
rec-4.4.0-beta1
rec-4.5.0-alpha0
rec-4.5.0-alpha1
rec-4.5.0-alpha2
rec-4.5.0-alpha3
rec-4.5.0-beta1
rec-4.6.0-alpha0
rec-4.6.0-alpha1
rec-4.6.0-alpha2
rec-4.6.0-beta1
rec-4.6.0-beta2
rec-4.7.0-alpha1
rec-4.7.0-beta1
rec-4.8.0
rec-4.8.0-alpha1
rec-4.8.0-beta1
rec-4.8.0-beta2
rec-4.8.0-rc1
rec-4.8.2
rec-4.8.3
rec-4.8.4
rec-4.9.0
rec-4.9.0-alpha0
rec-4.9.1
rec-4.9.2
rec-5.*
rec-5.0.0
rec-5.0.0-rc2
rec-5.0.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50868.json"
gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Fixed
0dab57e15f7d02d8b0c9bff513fe1c735f499322
Introduced
d281b39456519db31c6213d010d30d99df8cf852
Fixed
0dab57e15f7d02d8b0c9bff513fe1c735f499322
Introduced
8db45afa1affcb823e68afdeddedf93e136f5d3e
Fixed
6d7674f8f2a27de4f760f1eb82d98d4b0cf85bd9
Introduced
1f554acee8df440c2fc211f976b196b31b9c9284
Fixed
6d7674f8f2a27de4f760f1eb82d98d4b0cf85bd9
Introduced
cab15392afd841fe3b0bacd894003376d857459a
Fixed
c030a677aec54ab32cfa96a2edf6d77c6099e6ce
Database specific 
{
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
        "cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:*:s1:*:*:supported_preview:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0.0"
        },
        {
            "fixed": "9.16.48"
        },
        {
            "introduced": "9.9.3"
        },
        {
            "fixed": "9.16.48"
        },
        {
            "introduced": "9.18.0"
        },
        {
            "fixed": "9.18.24"
        },
        {
            "introduced": "9.18.11"
        },
        {
            "fixed": "9.18.24"
        },
        {
            "introduced": "9.19.0"
        },
        {
            "fixed": "9.19.21"
        }
    ]
}

Affected versions

v9.*
v9.18.0
v9.19.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50868.json"