{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"systemd","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:239-82.el8","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"systemd","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:252-32.el9_4","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"systemd","product":"Cryostat 2","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V1.1","status":"affected","version":"0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:systemd_project:systemd:25:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveId":"CVE-2023-7008","cwes":["CWE-300"],"description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","epss":{"date":"2026-11-02","percentile":0.58129,"score":0.00849},"exploits":[],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},{"score":5.9,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},{"score":5.9,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1793661439600,"publishedAt":1703336450515,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:2463"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:3203"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2023-7008"},{"source":"CNA: redhat","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222261"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222672"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/systemd/systemd/issues/25676"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:2463"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:3203"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2023-7008"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222261"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222672"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/systemd/systemd/issues/25676"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/"},{"source":"ADP: CVE","tags":[],"url":"https://security.netapp.com/advisory/ntap-20241122-0004/"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:2463"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:3203"},{"source":"secalert@redhat.com","tags":["Vendor Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-7008"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222261"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222672"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://github.com/systemd/systemd/issues/25676"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:2463"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:3203"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-7008"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222261"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222672"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://github.com/systemd/systemd/issues/25676"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://security.netapp.com/advisory/ntap-20241122-0004/"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"revision":"6428dd0be8cb936da898c5c5f778df422d434f546665c911fe8fe5fae453c046","sources":[{"modifiedAt":1793659381500,"name":"CNA: redhat","retrievedAt":1793660926389,"url":"https://www.cve.org/CVERecord?id=CVE-2023-7008"},{"modifiedAt":1793661439600,"name":"NVD","retrievedAt":1793665117432,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660930789,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-7008"}],"ssvc":{"assessedAt":1793659372228,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes","updatedAt":1793665117432}