CVE-2023-7008
A vulnerability was found in systemd-resolved.
Published Dec 23, 2023 · updated Oct 14, 2026 · systemd project systemd
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Dec 23, 2023 · NIST NVD
Detected
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
Affected
- cpe systemd project/systemd25
Sources
- CVE.orgVulnerability recordCVE-2023-7008
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-7008
30-day exploitation probability 0.8%
first.org - NIST NVDVulnerability recordCVE-2023-7008
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
nvd.nist.gov