CVE-2023-7008
Fixed in a distro release EPSS <1%CVSS 5.9
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Cryostat 2, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | systemd | 239-82.el8 |
| AlmaLinux 8 | systemd-container | 239-82.el8 |
| AlmaLinux 8 | systemd-devel | 239-82.el8 |
| AlmaLinux 8 | systemd-journal-remote | 239-82.el8 |
| AlmaLinux 8 | systemd-libs | 239-82.el8 |
| AlmaLinux 8 | systemd-pam | 239-82.el8 |
| AlmaLinux 8 | systemd-tests | 239-82.el8 |
| AlmaLinux 8 | systemd-udev | 239-82.el8 |
| AlmaLinux 9 | rhel-net-naming-sysattrs | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-boot-unsigned | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-container | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-devel | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-journal-remote | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-libs | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-oomd | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-pam | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-resolved | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-rpm-macros | 252-32.el9_4.alma.1 |
| AlmaLinux 9 | systemd-udev | 252-32.el9_4.alma.1 |
| Amazon Linux 2023 | systemd | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-boot-unsigned | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-container | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-devel | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-journal-remote | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-libs | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-networkd | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-oomd-defaults | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-pam | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-resolved | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-rpm-macros | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-standalone-sysusers | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-standalone-tmpfiles | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-tests | 252.16-1.amzn2023.0.2 |
| Amazon Linux 2023 | systemd-udev | 252.16-1.amzn2023.0.2 |
| Debian 11 | systemd | 247.3-7+deb11u6 |
| Debian 12 | systemd | 252.21-1~deb12u1 |
| Debian 13 | systemd | 255.1-3 |
| Debian 14 | systemd | 255.1-3 |
| Red Hat Enterprise Linux 8 | systemd | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-container | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-container-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-debugsource | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-devel | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-journal-remote | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-journal-remote-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-libs | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-libs-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-pam | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-pam-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-tests | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-tests-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-udev | 0:239-82.el8 |
| Red Hat Enterprise Linux 8 | systemd-udev-debuginfo | 0:239-82.el8 |
| Red Hat Enterprise Linux 9 | rhel-net-naming-sysattrs | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-boot-unsigned | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-boot-unsigned-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-container | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-container-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-debugsource | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-devel | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-journal-remote | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-journal-remote-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-libs | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-libs-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-oomd | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-oomd-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-pam | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-pam-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-resolved | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-resolved-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-rpm-macros | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-standalone-sysusers-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-standalone-tmpfiles-debuginfo | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-udev | 0:252-32.el9_4 |
| Red Hat Enterprise Linux 9 | systemd-udev-debuginfo | 0:252-32.el9_4 |
| Rocky Linux 8 | systemd | 0:239-82.el8 |
| Rocky Linux 9 | systemd | 0:252-32.el9_4 |
| SUSE Linux Enterprise Micro 5.3 | systemd | 249.17-150400.8.43.1 |
| SUSE Linux Enterprise Micro 5.4 | systemd | 249.17-150400.8.43.1 |
| SUSE Linux Enterprise Micro 5.5 | systemd | 249.17-150400.8.43.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | systemd | 249.17-150400.8.43.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | systemd | 249.17-150400.8.43.1 |
| Ubuntu 22.04 LTS | systemd | 249.11-0ubuntu3.21 |
| Ubuntu 24.04 LTS | systemd | 255.4-1ubuntu8.16 |
| Ubuntu 25.10 | systemd | 257.9-0ubuntu2.5 |
| Ubuntu Pro 14.04 LTS | systemd | no fix |
| Ubuntu Pro 16.04 LTS | systemd | no fix |
| Ubuntu Pro 18.04 LTS | systemd | no fix |
| Ubuntu Pro 20.04 LTS | systemd | no fix |
| openSUSE Leap 15.5 | systemd | 249.17-150400.8.43.1 |
| openSUSE Leap Micro 5.5 | systemd | 249.17-150400.8.43.1 |
| openSUSE Tumbleweed | systemd | 254.8-4.1 |