CVE-2023-7008

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Fixed
LOW (3.5)
  • T

    Tim Bastin detected CVE-2023-7008 with a risk of 3.55

  • T

    Tim Bastin fixed CVE-2023-7008

  • logo

    System detected CVE-2023-7008 with a risk of 3.55

  • logo

    System fixed CVE-2023-7008

Reopen this vulnerability

You can reopen this vuln, if you plan to mitigate the risk now, or accepted this vuln by accident.

Last calculated at:

Affected component

Logo von deb debian/systemd

Installed version:
252.26
Fixed in:
no patch available

Management decisions across the organization

Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 71cda54d19c6900d5d185b8bc7c11608a8a65bac