CVE-2023-50387 (KeyTrap)
CVSS v3.1
7.5 (High)
EPSS
5.00 % (93th)
Affected Products
13
Advisories
71
NVD Status
Modified
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
- CVE Status
- PUBLISHED
- NVD Status
- Modified
- CNA
- MITRE
- Published Date
-
2024-02-14 16:15:45
(6 months ago) - Updated Date
-
2024-06-10 17:16:15
(2 months ago)
Affected Products
Loading...
Loading...
Loading...
Configuration #1
|
Configuration #2
|
Configuration #3
|
Configuration #4
|
Configuration #5
|
Configuration #6
|
Configuration #7
|
Configuration #8
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...