A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3149-1 advisory.

    - CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when     DNSSEC=yes (bsc#1218297)

    Other fixes:
    - Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
    - Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
    - Skip redundant dependencies specified the LSB description that references the file name of the service     itself for early boot scripts (bsc#1221479).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3859 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3859-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 02, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : systemd     Version        : 247.3-7+deb11u6     CVE ID         : CVE-2023-7008 CVE-2023-50387 CVE-2023-50868     Debian Bug     : 1059278

    Multiple vulnerabilities have been fixed in systemd, the default init     system in Debian, when using systemd-resolved with DNSSEC.

    CVE-2023-7008

        Don't accept records of DNSSEC-signed domains when they have no signature.

    CVE-2023-50387

        DNSSEC denial of service (CPU consumption)

    CVE-2023-50868

        DNSSEC denial of service (CPU consumption)

    For Debian 11 bullseye, these problems have been fixed in version     247.3-7+deb11u6.

    We recommend that you upgrade your systemd packages.

    For the detailed security status of systemd please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/systemd

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records.(CVE-2023-7008)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization systemd security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records.(CVE-2023-7008)

Tenable has extracted the preceding description block directly from the EulerOS systemd security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3203 advisory.

    - Oracle-Redhat Errata ELSA-2023:3837 CVE-2023-26604 OLERRATA-43629

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3203 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:3203 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2463 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2463 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-509 advisory.

    systemd-resolved accepts records of DNSSEC-signed domains even when they have no signature, allowing man-     in-the-middles (or the upstream DNS resolver) to manipulate records. (CVE-2023-7008)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c79658eedf advisory.

    - A bunch of fixes for various components: systemd, systemctl, hostnamectl, bootctl, systemd-networkd,     systemd-network-generator, systemd-analyze, systemd-dissect, man pages.
    - Also has a patch for CVE-2023-7008 (rhbz#2222260)
    - Add missing %postun scriptlets for systemd-{resolved,networkd} so that they are restarted on package     updates.

    No need to restart or log out.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b8312ca5b3 advisory.

    - A bunch of fixes for various components: systemd, systemctl, systemd-firstboot, systemd-repart, bootctl,     systemd-networkd, systemd-network-generator, systemd-analyze, systemd-dissect, ukify, man pages.
    - Also has a patch for CVE-2023-7008 (rhbz#2222260)
    - Add missing %postun scriptlets for systemd-{resolved,networkd} so that they are restarted on package     updates.

    No need to log out or reboot.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206701	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : systemd (SUSE-SU-2024:3149-1)	Nessus	SuSE Local Security Checks	medium
206418	Debian dla-3859 : libnss-myhostname - security update	Nessus	Debian Local Security Checks	medium
204750	EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2024-2066)	Nessus	Huawei Local Security Checks	medium
203701	EulerOS 2.0 SP8 : systemd (EulerOS-SA-2024-2061)	Nessus	Huawei Local Security Checks	medium
198206	EulerOS 2.0 SP12 : systemd (EulerOS-SA-2024-1756)	Nessus	Huawei Local Security Checks	medium
198174	EulerOS 2.0 SP12 : systemd (EulerOS-SA-2024-1779)	Nessus	Huawei Local Security Checks	medium
198023	Oracle Linux 8 : systemd (ELSA-2024-3203)	Nessus	Oracle Linux Local Security Checks	medium
197783	RHEL 8 : systemd (RHSA-2024:3203)	Nessus	Red Hat Local Security Checks	medium
197682	CentOS 8 : systemd (CESA-2024:3203)	Nessus	CentOS Local Security Checks	medium
197140	EulerOS Virtualization 2.11.0 : systemd (EulerOS-SA-2024-1641)	Nessus	Huawei Local Security Checks	medium
197122	EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2024-1622)	Nessus	Huawei Local Security Checks	medium
196985	Rocky Linux 9 : systemd (RLSA-2024:2463)	Nessus	Rocky Linux Local Security Checks	medium
195045	Oracle Linux 9 : systemd (ELSA-2024-2463)	Nessus	Oracle Linux Local Security Checks	medium
194803	RHEL 9 : systemd (RHSA-2024:2463)	Nessus	Red Hat Local Security Checks	medium
193630	EulerOS Virtualization 2.10.1 : systemd (EulerOS-SA-2024-1557)	Nessus	Huawei Local Security Checks	medium
193615	EulerOS Virtualization 2.10.0 : systemd (EulerOS-SA-2024-1538)	Nessus	Huawei Local Security Checks	medium
193020	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1520)	Nessus	Huawei Local Security Checks	medium
192999	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1499)	Nessus	Huawei Local Security Checks	medium
191983	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2024-1349)	Nessus	Huawei Local Security Checks	medium
191971	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2024-1327)	Nessus	Huawei Local Security Checks	medium
191836	EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1230)	Nessus	Huawei Local Security Checks	medium
191823	EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1252)	Nessus	Huawei Local Security Checks	medium
190069	Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2024-509)	Nessus	Amazon Linux Local Security Checks	medium
189673	Fedora 38 : systemd (2024-c79658eedf)	Nessus	Fedora Local Security Checks	medium
189385	Fedora 39 : systemd (2024-b8312ca5b3)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-7008

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium