Linux · Debian · Security advisory · February 14, 2024

DEBIAN-CVE-2023-50868: Security update for 7 packages

DEBIAN-CVE-2023-50868, released February 14, 2024, fixes 1 CVE across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High1 publicly disclosed
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.7430
99th percentile

Fixed package versions

ProductReleaseFixed in
bind9Debian 12.15 (bookworm)1:9.18.24-1
bind9Debian 13.5 (trixie)1:9.19.21-1
bind9Debian 141:9.19.21-1
dnsjavaDebian 13.5 (trixie)3.6.2-1
dnsjavaDebian 143.6.2-1
dnsmasqDebian 12.15 (bookworm)2.90-4~deb12u1
dnsmasqDebian 13.5 (trixie)2.90-1
dnsmasqDebian 142.90-1
knot-resolverDebian 12.15 (bookworm)5.6.0-1+deb12u1
knot-resolverDebian 13.5 (trixie)5.7.1-1
knot-resolverDebian 145.7.1-1
pdns-recursorDebian 12.15 (bookworm)4.8.6-1
pdns-recursorDebian 13.5 (trixie)4.9.3-1
pdns-recursorDebian 144.9.3-1
systemdDebian 12.15 (bookworm)252.23-1~deb12u1
systemdDebian 13.5 (trixie)255.4-1
systemdDebian 14255.4-1
unboundDebian 12.15 (bookworm)1.17.1-2+deb12u2
unboundDebian 13.5 (trixie)1.19.1-1
unboundDebian 141.19.1-1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-50868 MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU7.5 0.7430 DisclosedExploitation Less Likely
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.