{"id":"CVE-2023-50868","details":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.","modified":"2026-04-16T04:31:59.125683737Z","published":"2024-02-14T16:15:45.377Z","related":["ALSA-2024:0965","ALSA-2024:0977","ALSA-2024:1334","ALSA-2024:1335","ALSA-2024:1781","ALSA-2024:1782","ALSA-2024:1789","ALSA-2024:2551","ALSA-2024:3271","CGA-6rp3-4prw-27p6","SUSE-SU-2024:0574-1","SUSE-SU-2024:0590-1","SUSE-SU-2024:1894-1","SUSE-SU-2024:1923-1","SUSE-SU-2024:1982-1","SUSE-SU-2024:1991-1","SUSE-SU-2024:1991-2","SUSE-SU-2024:2033-1","SUSE-SU-2025:0071-1","SUSE-SU-2025:0130-1","SUSE-SU-2025:20024-1","SUSE-SU-2025:20118-1","openSUSE-SU-2024:0048-1","openSUSE-SU-2024:13687-1","openSUSE-SU-2024:13742-1"],"references":[{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/"},{"type":"ADVISORY","url":"https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1"},{"type":"ADVISORY","url":"https://kb.isc.org/docs/cve-2023-50868"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2023-50868"},{"type":"ADVISORY","url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html"},{"type":"ADVISORY","url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/"},{"type":"ADVISORY","url":"https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240307-0008/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2024/02/16/3"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2024/02/16/2"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1219826"},{"type":"ARTICLE","url":"https://datatracker.ietf.org/doc/html/rfc5155"},{"type":"EVIDENCE","url":"https://www.isc.org/blogs/2024-bind-security-release/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/isc-projects/bind9","events":[{"introduced":"0"},{"last_affected":"6d06e7e7e585e30b419e4e20815cb8233c48f7b1"},{"introduced":"0"},{"last_affected":"f8a0c0bed6ed629e314d22619510939c61d88b0e"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"6.0"},{"introduced":"0"},{"last_affected":"8.0"}]}},{"type":"GIT","repo":"https://github.com/powerdns/pdns","events":[{"introduced":"0"},{"fixed":"a06ef30be67538e93f8cc08ccac78eaefbbfd4cc"},{"introduced":"99d7f7a403baf29714a9f640c24f106c402c5891"},{"fixed":"9a555d9e76e9078fccd7ac0d6cbfbd705be6ebfd"},{"introduced":"d1499af06af5dfdff785e9b0595ee692074dba6e"},{"fixed":"8cb2740c8468d48047cf40870e6373bdce833c60"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"4.8.5"},{"introduced":"4.9.0"},{"fixed":"4.9.3"},{"introduced":"5.0.0"},{"fixed":"5.0.2"}]}},{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/bind9","events":[{"introduced":"19d6c56085e97cf4ac559cdc27edd624127bcb32"},{"fixed":"0dab57e15f7d02d8b0c9bff513fe1c735f499322"},{"introduced":"d281b39456519db31c6213d010d30d99df8cf852"},{"fixed":"0dab57e15f7d02d8b0c9bff513fe1c735f499322"},{"introduced":"8db45afa1affcb823e68afdeddedf93e136f5d3e"},{"fixed":"6d7674f8f2a27de4f760f1eb82d98d4b0cf85bd9"},{"introduced":"1f554acee8df440c2fc211f976b196b31b9c9284"},{"fixed":"6d7674f8f2a27de4f760f1eb82d98d4b0cf85bd9"},{"introduced":"cab15392afd841fe3b0bacd894003376d857459a"},{"fixed":"c030a677aec54ab32cfa96a2edf6d77c6099e6ce"}],"database_specific":{"versions":[{"introduced":"9.0.0"},{"fixed":"9.16.48"},{"introduced":"9.9.3"},{"fixed":"9.16.48"},{"introduced":"9.18.0"},{"fixed":"9.18.24"},{"introduced":"9.18.11"},{"fixed":"9.18.24"},{"introduced":"9.19.0"},{"fixed":"9.19.21"}]}}],"versions":["auth-3.1-rc1","auth-3.1-rc2","auth-3.1-rc3","auth-3.2-rc1","auth-3.2-rc2","auth-3.2-rc3","auth-3.2-rc4","auth-3.4.0","auth-3.4.0-rc1","auth-3.4.0-rc2","auth-4.0.0","auth-4.0.0-alpha1","auth-4.0.0-alpha2","auth-4.0.0-alpha3","auth-4.0.0-beta1","auth-4.0.0-rc1","auth-4.0.0-rc2","auth-4.0.1","auth-4.1.0","auth-4.1.0-rc1","auth-4.1.0-rc2","auth-4.1.0-rc3","auth-4.2.0-alpha1","auth-4.2.0-beta1","auth-4.2.0-rc1","auth-4.2.0-rc2","auth-4.3.0-alpha1","auth-4.3.0-beta1","auth-4.3.0-beta2","auth-4.4.0-alpha0","auth-4.4.0-alpha1","auth-4.4.0-alpha2","auth-4.4.0-alpha3","auth-4.4.0-beta1","auth-4.5.0-alpha0","auth-4.5.0-alpha1","auth-4.5.0-beta1","auth-4.6.0-alpha0","auth-4.6.0-alpha1","auth-4.6.0-beta1","auth-4.7.0-alpha1","auth-4.8.0-alpha0","dnsdist-1.0.0","dnsdist-1.0.0-alpha1","dnsdist-1.0.0-alpha2","dnsdist-1.0.0-beta1","dnsdist-1.1.0","dnsdist-1.1.0-beta1","dnsdist-1.1.0-beta2","dnsdist-1.2.0","dnsdist-1.3.0","dnsdist-1.3.1","dnsdist-1.3.2","dnsdist-1.3.3","dnsdist-1.4.0","dnsdist-1.4.0-alpha1","dnsdist-1.4.0-alpha2","dnsdist-1.4.0-beta1","dnsdist-1.4.0-rc1","dnsdist-1.4.0-rc2","dnsdist-1.4.0-rc3","dnsdist-1.4.0-rc4","dnsdist-1.4.0-rc5","dnsdist-1.5.0","dnsdist-1.5.0-alpha1","dnsdist-1.5.0-rc1","dnsdist-1.5.0-rc2","dnsdist-1.5.0-rc3","dnsdist-1.5.0-rc4","dnsdist-1.6.0","dnsdist-1.6.0-alpha0","dnsdist-1.6.0-alpha1","dnsdist-1.6.0-alpha2","dnsdist-1.6.0-alpha3","dnsdist-1.6.0-rc1","dnsdist-1.6.0-rc2","dnsdist-1.7.0-alpha0","dnsdist-1.7.0-alpha1","dnsdist-1.7.0-alpha2","dnsdist-1.7.0-beta1","dnsdist-1.7.0-beta2","dnsdist-1.8.0-alpha0","ondrej/008bfb6249a5f81d9e02ad4d39fda63fab57a0ad","ondrej/00ce93a69cd809810b82dbb229abf59d8e5850cc","ondrej/067f87f158b633e18a9c6fd0b038d1dc288bcb74","ondrej/074c7cc12c0eda40441926a8a96631c3176824a9","ondrej/1a1413ff5910ace7919bb8db0a1bb1f6e9c9ff7d","ondrej/2438db2eae8baf084615aff3b210ea51cd2f1fe1","ondrej/4098157e6ce98910ff99c58c41c6cf8069b79cc7","ondrej/4281aaab4503116fcf50caa348e1b5e7d414b742","ondrej/42e84e4b97be23f2b3754844e9d4478f48e92b48","ondrej/46caf5f4a4522d42480aee4d5949ea9546f98c2f","ondrej/4d292fc37ff5e99462756352c6028af7d0becf74","ondrej/4f369af51ede0e5ac7b3a14c451c5a41350a61cc","ondrej/53738634c3b511bd78e6626df95ae140631b080c","ondrej/6d06e7e7e585e30b419e4e20815cb8233c48f7b1","ondrej/6d1fdb850516a8d1fbfa853c56a1ef7627d54a72","ondrej/761b47a64845cb647d4fa3362be538eb0e7174d9","ondrej/840e56a979c3719ded668d5aaa04b1bddce465ef","ondrej/9cd2880a82f627bc44ab65fdaa19c2bcd9e61c96","ondrej/a42afbce2e34a5f990517fee7eab013c4adb8c0a","ondrej/a5f554959ec531712f6e14a8cb8c90d87cc27932","ondrej/b177581bb230d89821d1e2e5e91f93bee3fc4192","ondrej/b6298b394e9eaefcfa2458cd56c345d778e99b8e","ondrej/be1e6499742e241d71c7e79434e278a0c89d141b","ondrej/c63b7fad498dbe56710b655bd296a58abba64bb8","ondrej/d7e5f7903de06e504aac4a3822a41d69e159e370","ondrej/e00b13ac6e5a49434fbe534b0cab86b9ee4fbdb5","ondrej/f8a0c0bed6ed629e314d22619510939c61d88b0e","ondrej/fb07c38697c9f4f76dcb921487c4f96813c99b69","rec-3-0","rec-3-0-1","rec-3.0","rec-3.0.1","rec-3.1.4","rec-3.3.1","rec-3.5","rec-3.5-rc1","rec-3.5-rc3","rec-3.5-rc4","rec-3.5-rc5","rec-3.6.0","rec-4.0.0","rec-4.0.0-alpha1","rec-4.0.0-alpha2","rec-4.0.0-alpha3","rec-4.0.0-beta1","rec-4.0.0-rc1","rec-4.0.1","rec-4.0.2","rec-4.1.0","rec-4.1.0-alpha1","rec-4.1.0-rc1","rec-4.1.0-rc2","rec-4.1.0-rc3","rec-4.2.0-alpha1","rec-4.2.0-beta1","rec-4.2.0-rc1","rec-4.3.0-alpha1","rec-4.3.0-alpha2","rec-4.3.0-alpha3","rec-4.3.0-beta1","rec-4.4.0-alpha0","rec-4.4.0-alpha1","rec-4.4.0-alpha2","rec-4.4.0-beta1","rec-4.5.0-alpha0","rec-4.5.0-alpha1","rec-4.5.0-alpha2","rec-4.5.0-alpha3","rec-4.5.0-beta1","rec-4.6.0-alpha0","rec-4.6.0-alpha1","rec-4.6.0-alpha2","rec-4.6.0-beta1","rec-4.6.0-beta2","rec-4.7.0-alpha1","rec-4.7.0-beta1","rec-4.8.0","rec-4.8.0-alpha1","rec-4.8.0-beta1","rec-4.8.0-beta2","rec-4.8.0-rc1","rec-4.8.2","rec-4.8.3","rec-4.8.4","rec-4.9.0","rec-4.9.0-alpha0","rec-4.9.1","rec-4.9.2","rec-5.0.0","rec-5.0.0-rc2","rec-5.0.1","v9.10.0a1","v9.10.0a2","v9.10.0b1","v9.10.0b2","v9.10.0rc1","v9.11.0a1","v9.11.0a2","v9.11.0a3","v9.12.0a1","v9.12.0b1","v9.12.0b2","v9.12.0rc1","v9.13.0","v9.13.2","v9.13.3","v9.13.4","v9.13.5","v9.13.6","v9.15.0","v9.15.2","v9.15.3","v9.15.4","v9.15.7","v9.15.8","v9.18.0","v9.19.0","v9.5.0a1","v9.5.0a2","v9.5.0a3","v9.5.0a4","v9.5.0a5","v9.5.0a6","v9.7.0a1"],"database_specific":{"vanir_signatures_modified":"2026-04-12T09:09:22Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50868.json","vanir_signatures":[{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"startDoResolve","file":"pdns/recursordist/pdns_recursor.cc"},"id":"CVE-2023-50868-01ad9672","signature_version":"v1","digest":{"length":34463,"function_hash":"176603852840263732830139391620210804690"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"getHashFromNSEC3","file":"pdns/validate.cc"},"id":"CVE-2023-50868-062c6153","signature_version":"v1","digest":{"length":467,"function_hash":"328683417650457581262610117316356019712"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-aggressive_nsec_cc.cc"},"id":"CVE-2023-50868-083da8f0","signature_version":"v1","digest":{"length":10176,"function_hash":"268177118561092697802754434108238563121"},"signature_type":"Function"},{"deprecated":false,"signature_version":"v1","target":{"file":"pdns/validate.cc"},"id":"CVE-2023-50868-174ac55f","source":"https://github.com/powerdns/pdns/commit/9a555d9e76e9078fccd7ac0d6cbfbd705be6ebfd","digest":{"threshold":0.9,"line_hashes":["178585216212480525248623104818653715937","244737936592320707338235782141734478957","181618797184703273163915477809855533758","93902665501933052428645356920521658709","168331016405693708488023543812172760137","3708356298483242612528156700494594764","97757646064924305269552380043129698594","208960889785204028979000927507541654964","10561099345463757010908746648340728709","227633508454585325084060518169521423628","20998068797366467838744357289751747627","69286887233749009649609875757789428005","77364079539111044341949893033321840128","51714734026829429060540732931841784486","192470104648473850419094843585153221734","257184729416116647967731583745227611037"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"SyncRes::getDenialValidationState","file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-23f5e7df","signature_version":"v1","digest":{"length":290,"function_hash":"262751570089449406613714219673951643147"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-aggressive_nsec_cc.cc"},"id":"CVE-2023-50868-2fc494bd","signature_version":"v1","digest":{"length":5591,"function_hash":"201938902450456507711023241083204283972"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"SyncRes::processRecords","file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-3c5a92a3","signature_version":"v1","digest":{"length":11682,"function_hash":"144101148251292812822552147187507497875"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/validate.hh"},"id":"CVE-2023-50868-414ba439","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["283636783499077570517813125236252646019","98266169053211755979039492142575993438","250947794110650215206031762890533684888","273954655690166753894626883533981751593","73726588199350004522212905320741653902","321222656114111067507416717600502490492","328630740970879266407118420545856431396","286967201821778203456072662417434278429","78116158558059304740440951749559527375","194453506980586597666080264600372909720","226097889647176429605412780612139180131","161597350340195228803871972530034321654","119330673594504515656791741674592244629","8012198587593013369055707900455100945","234675403124050851403760597048832890879","97217041581231381839158334622209692665","29375028603819005624729860355530740164","299410751161550586046008453476178135542","7650350519648180865815400437868342838","289552933774569700452496213726043645312","251829755293248410306948943939744933459","77782627734506595061411460754907020087","213736894569745813792402668015928549774"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/test-syncres_cc.cc"},"id":"CVE-2023-50868-4409c549","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["87135926578870222010674378874118747340","57237258143884138168031569137615708949","168461804457156753010524234273864158193","333781539962980151031688851714367449452","248997609182751456264268001406217488608","375846118695418710349235673965876457","260750681673814841162777881510868397449","325546304966651325849141354975180289871","87191481485116227879508978461358465236","197510784055604967521119576049700988890","35966383391382691446327381186172787493","1095629290931655923258011813549850652","175684298924600111707053975788013528771","114560696756230579582284906095129327469","86960333169574558170223401574326656572","339438312363768547709214868614686250775","218541082475426600873928620660191718162","265366429000470787763328292240101270071"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-4c29b156","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["303172823824496942998020999070784303492","310704801643282397821671912773267860478","244379074811327291654505096020027983248","139574511854997902478593415519311718607","226226314769662449127586198286712419474","288952089262852733402759641981525499322","759459097383481547015260297861705663","205496660579841531930461645595439352051","1281654340080255912635957987431691035","153506063110400025445235910708910231423","282411448783880003618976957002119648023","126780183499446213740215087613348045806","4839949982636909795247002058824704197","118631047276839637417887626243977692404","137441373856506857666291269773712511356","267577596158856569120247741241654371639","38856170364456553027589492230200036627","288310433387704514581803779898688168704","279030657697132023103014735958904475874","142299643817515063738423219451764552031","302997400899961716345652485027567489093","46145510563845823158399988578783331687","312757879743987143364353714930406275786","47424972529039776680801325920847678055","243498932651160365280532997903641973809","254371924771995138144102716271595074088","227561236021377124055149093121935918953","187134193853804674360711903215486643579","258244018291424588451986939727040618585","173590339126518515989730211868688877661","116993296216213543169008162665027499836","32316546056093695773044325009344286235"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-syncres_cc4.cc"},"id":"CVE-2023-50868-51e31370","signature_version":"v1","digest":{"length":749,"function_hash":"229870441724590464242116841971660093910"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/rec-main.cc"},"id":"CVE-2023-50868-5ab3d10b","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["246213548880317645612913511255347835183","198374657106381340169110710115547197954","91868372081301139743214068101352155925","115137409519189682566735732303704895177","162630731079304860905670236604370396068","144644469415681443399759493463913537070","279908175447236100861164916986558219629","302887937523186454808721734107851983345","304020558253582119346454637327085703377","339052181644511518129372936231488195327","163543489994443188769962985265091862596"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-syncres_cc8.cc"},"id":"CVE-2023-50868-5b1806eb","signature_version":"v1","digest":{"length":991,"function_hash":"221775800049246800404753763829073871238"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/aggressive_nsec.hh"},"id":"CVE-2023-50868-5c068d48","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["162938783574694680727024178420058089812","260599855360161378545296441298751526342","156521715007057728317678794513222189073","97103136073270255607193919302641049150","15875314859418743949017234812959119770","48042005653955568767190065232582158319","208108342002259745228355775600252474911","77413834573207562103757067503508076577","205572938443260837538761358302661706991","235923284411608242724844275450425753129","93899516907767730347799814568389905562","72237180526432311217820168642278848416","330084750757011742482191554265641112698","151241109245307331342044520374316995236","166074808795112268289282205059186010803","53428928837036742669226142315001531232"]},"signature_type":"Line"},{"deprecated":false,"signature_version":"v1","target":{"file":"pdns/validate.cc"},"id":"CVE-2023-50868-66376c7f","source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","digest":{"threshold":0.9,"line_hashes":["79832725603263281824728207423819500381","136121121042443266599155984307365798908","7579429987190451805432887903850970330","212249461779489199242153785382604250482","109135895489821893190822885462097002932","205764383618134148702322740275221308775","160139286514190820315366545328689110505","275658527447075066297641346986203960674","266003216984682914422202940842970906320","310639213050687006369565092295106798800","18508322807146590547591311625654730272","268264061665704776921747713077906250940","302025683003793777518538891089196012390","195846652566903960357073705707854514839","177490979312243118906625739592851181680","114265547855935992197529665247454500802","262039726917717339518946285753822746936","206023621223120607416232147109117862254","103650588088613241728818342607454579140","16564560907030384868081020515038713308","173081965138356895495227319823365317633","145614393292984484520271648722765650711","233930975746745500104174947153545810693","161633777375112697037517743828136045049","285246389320182263628072766415093869798","88974341026863663772985816526521547265","7707443559821053226990086009612035633","304789561999694047764487224290975956545","227528441169284845339973036663776584323","38403018990307283882016701293103029960","288703675135726834190746404153475174366","243008788559349063955070318853577467675","216969579267220952242349407864841796992","64126283598034240243007405244165937087","87512805201838293398961283928959393534","213377612645000966708196909927619557920","129191231661084257433159852260518187782","225668953503437646315069219364499953506","290068630102879728668756746754195558325","198229575770008447805569718508846520345","84596512485701611176711021485519050603","35707346917854727480265451595832496111","165265499482595842002624054146447790202","124405514296576451511138444971060293492","180174288299119125572334593483691002537","146751936415305931787209359399524143491","43108618757311529097963319484710112914","47304844193974636182184056615525745594","115896876766834545857146455247443683968","88161178298581199024308991641516059834","301298909872454019316759577216174339948","74535543500834019721048196238910467927","77400864644515464641866612657591129073","28863046375729474974847744461431567008","100576439105202080032137558362792375570","15355931748895832063511040888787762397","257807748552900731208920484626058395831","306187511689284397046462377685971209835","144889949860206781189750820439306851739","28974959114183338571371109545286602446","129242833482222008894873355417965805564","287427381720736463504205360556178909432","78178802820002825073033738521543929930","274864497922723988837742782845031191250","201107639994972254121817733940429865511","72603480352562290009393547326304424081","244284651082007074438951948813190608826","265802292550244983776365080383061875250","121118196320711084797578538535288605309","60154423595719904565949730956858903357","64012257942413945067528800179701424395","213204524043564239235311674398840879072","234166450687778292479827088612847807245","161749997007013391719896445593215529222","109623414539966749610714648337073064614","221738815822164508459991919953805671269","83449009365860886744104580396243608886","17861923872891582447816296328747617936","24615985214523269704899201300466477957","187623812894230732665060456744795247725","162470054377569306244192032096319893622","121604881260533722635684303147794106113","325119465995948306130287400371548902904","107892206631391935089280153694386389407","258948465452200131188514769386393817307","13056422247372447615399764825265855418","151917278436337622983482468834014529415","217343904518818082800974531082159205271","181874444957667010411013997347483502620","74219634987828838674627390349404971627","188245467399657593908681952970158138835","258403308513441704186066957999236260607","179274747439568817782421807555650081423","79508708261333300566696262417770647093","20752794095454973661995111782828655163","12877267271678365564508748955750074306","23440309254140378318380602878271023703","198312353320633343626068675373177703478","278438009381012563739167214186194552857","258564685460748257254786505746725224281","198128655032285780661724897843808622789","25041617254545272262587495630283057450","76519194905711156209216324691762238454","264530879979244893888712438466949999038","86839253342750811206300710916743324750","143989138482360546628178866066745307799","111411854317236412265799593536870716886","101279859284796914962907931878352923923","164220299810404751836229551471832671218","58421061181835833077330412746178359236","339775204105862315974276088986738216486","285269289550409433602305949051133686754","120941933152743795457681295000288271381","331801308480492177675721680737850476714","290628169295292245497661202621056044893","85072611306149692474499011678982903797","124368838238377574831767131553652538441","99918115342924131904980513437474755832","232093067124741504314639081994939462093","298716320910069242026407906447125837588","300363308592532734673311432540235326936","289133088725502953824827251563111932056","121263702325306518499637907855088708627","110776887894007573539732190545948890963","137402627482809749145332735467419359213","317171593538832428965157342874517245550","305448870124749237111236723061466100450","296091088346882797193274749229398337037","147733065014269571132803886061456980122","135334511995712053454211983596406062796","220507059218483898368384524665888559160","315206171965388127018699298848498077498","270428276254396732719496582272130482024","17980643854531094962022909651247900379","77233038318362385985282581208577591698","60471518920184525503633250638384068890","156705016326768307543459280125269595332","245610865609447191910113138435826479510","154662197151288609245651778773497222441","201002131649179959306349282479048715858","187376479006977276094249183681188049703","173945974642982486907342098692119170151","259064981300901789629132194805648730767","76347469868300076821559255027002954501","146809952176285953321033137661028408280","309433646999716151839753841046024512749","122995438028393502112232376700563585616","113633937209518995165026735478361693689","261820193167725758257609116189258809245","223199644247104918316209203026911520359","26829325539540292377335784827453174467","50229008762261463698742376648653877214","316444591575542437113923742935659609077","340151998747381620920577735094457892466","45435179104651287563423487552147608691","331631801252632413043763184391897447328","230516019676062089230009119096887871584","19361719694582814345463758135816613037","80592353512163375066747487791729102552","288266781746101062736460494692718393152","265789599347438035373897387364021911561","258739198185208144352045712405019020893","168940920548591584625553815024704258934","77364079539111044341949893033321840128","51714734026829429060540732931841784486","192470104648473850419094843585153221734","257184729416116647967731583745227611037"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"denialProvesNoDelegation","file":"pdns/validate.cc"},"id":"CVE-2023-50868-6d9be0ef","signature_version":"v1","digest":{"length":875,"function_hash":"302723458353355067456265139087992119981"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"checkSignatureWithKey","file":"pdns/validate.cc"},"id":"CVE-2023-50868-70248d6d","signature_version":"v1","digest":{"length":1340,"function_hash":"125846665646480505732460883489685005659"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"SyncRes::doCacheCheck","file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-722025d2","signature_version":"v1","digest":{"length":8670,"function_hash":"237651033472650520543744729901642088019"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/9a555d9e76e9078fccd7ac0d6cbfbd705be6ebfd","target":{"file":"pdns/recursordist/test-syncres_cc4.cc"},"id":"CVE-2023-50868-74621356","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["280541576284625709616919642506530812567","138589948374814444831101465511464491587","219743074076269297523782248169427639246","337208479018780549800485499402567238357","13496507610968141840912455811182880280","44634378024328069999864065902465234301","269501546147309945784543530323053302496","123743314150583368077220613429630803871","264178564443360619521567115859063818520","65205712740504520294010437271601346071","86428453699527541691284788984241624746","242905184568036141284921900014219012062","238860539340513662440936799391468854342","196901657586793187236221380099581752269","308190637799749395781167263167179079081"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"SyncRes::SyncRes","file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-7cb61f51","signature_version":"v1","digest":{"length":400,"function_hash":"245110784488617669549691641236246149559"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/rec-zonetocache.cc"},"id":"CVE-2023-50868-7d96e55a","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["208807016581462850761067011426790570819","222765816567279503078317896735363489393","130170832472289519018609214602546465762","309562435393939999309993056568710825889","291207676429563622719288851477403350409","296217053566930034108307834291433458547","212855984202073563241855987530078747866","226390317806838657167719430186380662093","99073516010529034353212745866868804182","171936822927051098076871339609452094758","126125364666418562571740032160055441050","146702048151752805459474688090063833996","166037084163494903211229021229495085759","198039184982815417720556049775270566867","201065836894517648890385217320006435318","114860943063519429101686306134986956441","99133433450492282513195325354125252520","29494589367479417139345937272261280883","200249956784940431364788112740055588134","132284918183345244267606326140913822163","42954076379284307442328437044016044733","279276882039381670440392331625864597161","2483631019615832407708022523545572794","135703691908081045400498933928722696674","273574781617848575486281538185982057708","44492868718748170367287073603624273910","225622063314997395916138071349856511573","189405725116025842439315287248220938085","166729728342520445817727721870734294178"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"ZoneData::dnssecValidate","file":"pdns/recursordist/rec-zonetocache.cc"},"id":"CVE-2023-50868-82fc76a7","signature_version":"v1","digest":{"length":2619,"function_hash":"328636733303067266444558471812022627916"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"provesNSEC3NoWildCard","file":"pdns/validate.cc"},"id":"CVE-2023-50868-844eadf8","signature_version":"v1","digest":{"length":2059,"function_hash":"338245982870618795271934596690539583297"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"SyncRes::getDSRecords","file":"pdns/recursordist/syncres.cc"},"id":"CVE-2023-50868-a2ed422c","signature_version":"v1","digest":{"length":2512,"function_hash":"292402535340227049169907762145621694608"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"getDenial","file":"pdns/validate.cc"},"id":"CVE-2023-50868-a913a995","signature_version":"v1","digest":{"length":10933,"function_hash":"276822132127916737503058875562565456769"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"initDNSSEC","file":"pdns/recursordist/rec-main.cc"},"id":"CVE-2023-50868-ac006e6f","signature_version":"v1","digest":{"length":2468,"function_hash":"199005116271360936856240145547469059169"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"handlePolicyHit","file":"pdns/recursordist/pdns_recursor.cc"},"id":"CVE-2023-50868-aef08b13","signature_version":"v1","digest":{"length":3436,"function_hash":"32882008633766874652680922645499285804"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/test-syncres_cc8.cc"},"id":"CVE-2023-50868-b1e9be5e","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["275877606813609696797027994360840052560","188235499747151108914142518385177395701","243974070829585452276152430060248862307","219463589773636423513824269164286037137","131435343899353616624744725760161009208","133786629933225097278034757947692341086","226792856193775079711047882245685818729","240270709973197487828790952792621959730","248245719342831535619293054664701440572","196802340064912309311306785455131544031","106076137675069887101710584849510056180","187010835381074317189080214811044066985"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/test-syncres_cc5.cc"},"id":"CVE-2023-50868-b86e57ca","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["133255984426545022424052306168930513641","280750432861107936021679781714298566999","177627683124828512310674321952720544169"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/syncres.hh"},"id":"CVE-2023-50868-b8fcfcd0","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["99569335311108693266966714054633280447","90899760046378759300562517622222505275","205007296420234148427463453645297980820","244797334807713615783829748972756323833","203120988941798207271283062345069311906","89345032858187503125776450587055487287","230360796239797816755762325965456409462","142476635734846513314067466139426424415"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"addRRSIG","file":"pdns/recursordist/test-syncres_cc.cc"},"id":"CVE-2023-50868-bc82f8e6","signature_version":"v1","digest":{"length":1221,"function_hash":"312122624728808263139212161962316949248"},"signature_type":"Function"},{"deprecated":false,"signature_version":"v1","target":{"file":"pdns/recursordist/test-syncres_cc4.cc"},"id":"CVE-2023-50868-c0d39c01","source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","digest":{"threshold":0.9,"line_hashes":["297043361218927744463467692600577282909","20340612127680926051692304070575989002","183709416090052173005711278107979397656","335395832355811060282577421404735314428","175529707738406261536946861018847289107","106486431702031075668069592566457732038","304979536171400610128522982468988879821","106380172375703614865380197382181980574","258631309504678038113987880391316971300","299620966466899708834835009540021978753","26630041586762155973087781541268899388","56092975392103896194412280252114520096","100215797612975601430290002302542896840","288101877215013335202927204819476897431","234611947314357384256466978432670547454","151990843105713058371893811982155481412","219743074076269297523782248169427639246","51362996106143278379662088525979483132","212933489195076835169368130134300149897","308190637799749395781167263167179079081","81218147360282124215879788256999399464","332454457122096627064546553144114269392","4844581957085122452842426890155879622"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-aggressive_nsec_cc.cc"},"id":"CVE-2023-50868-c198d938","signature_version":"v1","digest":{"length":3735,"function_hash":"189182676559507667683258029415247582168"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/aggressive_nsec.cc"},"id":"CVE-2023-50868-d42be12c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["168816725330614325431801917564847909834","244603242983610693592464399124644928484","248523454387960730226205648189945768091","35883922085724000096792393144543916716","170349768446877051266328797936631350730","318226875350934035100857627671987887416","183004319793262726347828217408273743047","52081533429086402665299670439436875966","196715805455133350345980195430319726020","111883792506325369991196678909574194621","65136791765873609958978022941562273998","118714528154525975654661593494877563285","35460847387215270494112743132235412398","77666261167330640888969482449377191127","65201080339936237560892017224804284357","72375595812537172698012920986611613335","115656917679763045814707090561559103800","156993674668934439809487683312610754184","86158422560911607272145902789890101670","211922929660464637757006752824056615868","57251373498991362363983837901421372735","30054278092585810891039137824532515312","101276665981307245575069892444165715064","19116375794891649013237562005054854906","246307299337825421733772711186716161974","331801036890005068556462796427403547785","122428901509078784356629854198376750488","53945673907140783565657043618929496540","185781911957690356061764224713044134825","290061488250186399188960469337378124623","268828735614472351204396557072144595398","148769480408200933053980788661303390482","21210386605096626001911049823783502285"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"initSyncRes","file":"pdns/recursordist/rec-main.cc"},"id":"CVE-2023-50868-d8e6cba9","signature_version":"v1","digest":{"length":5666,"function_hash":"72445370177827932011678196590868600236"},"signature_type":"Function"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"file":"pdns/recursordist/test-aggressive_nsec_cc.cc"},"id":"CVE-2023-50868-ed9ec46b","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["155768611407861485088623162828049862418","284473041973152118926187241489464392744","54429361020064817301903826804033214255","145185016543007838941569655560380628990","61438338837649021389953192992632816007","51613486602451999252808362294013322564","135277449233440648040282201887668179092","325187921611880055983269215573988449630","262273470896464538692421243461070009686","215933242972549630444035122807438279508","97076308453836597529373614899633627465","306807835013470896779864757589328493495","86967931987324885816785229770060961295","167590945244442305749953791469467729989","222514823447567910602052577848611324076","334696862137053934486820247623196397832","227182886398863997893776534180649501688","309120292575427016793835218374081288593","227456951468948383294706382773086067222","133739275727244889725896615262178155426","233748672962224261187996293595541446313","51613486602451999252808362294013322564","316061189762166060734423683218403700324","32131382725752833187331578223321921027","88707298645867082132052367113936103875","216053055099745813724470822686030848770","314694767088232501960244673212608442276","72524956192364886975531271841877689976","32939080408739096013205340521690709163","18915100124700271768726633669954250070","305191906615152169706057777016543127226","233748672962224261187996293595541446313","194814122904627161923477948449293440994","8277720136075038132304629891421454597","90508103152731987330941470507659237108","340099106733659524315839078767477232491","340050056811134544101168156987092435477","191306270472402699590750471032265889795","4530662870743485691830186206232493668","44574774519568376306632805951238251479","305191906615152169706057777016543127226","233748672962224261187996293595541446313","51613486602451999252808362294013322564","316061189762166060734423683218403700324","32131382725752833187331578223321921027","88707298645867082132052367113936103875","283959733187147642282502136816214652061","203181149469070667871567673603859900593","232064454510282542634882589328076166519","335724076771346523461445951989230672239","122563393576851323498751052357489052324","72238683474172155385711118385839588641","130280194645370544688027111240942869105","160643404219712362559443419735549389688","239723717280750479248066639993683509175","299136263106185869868473198562387746506","290714355447936038992388135794892119609","11222973045190315035545126437462224586","65743375577857166001484443915582625217","289999830444605890972334418110076302874","333915963877952852794461392831640454900","275597402759409818067709574559147071907","307722225880587618660498801659798576544","181671755519290667156159776949946556474","17821683500012562837227424944015734410","61438338837649021389953192992632816007","51613486602451999252808362294013322564","316061189762166060734423683218403700324","32131382725752833187331578223321921027","88707298645867082132052367113936103875","216053055099745813724470822686030848770","314694767088232501960244673212608442276","72524956192364886975531271841877689976","32939080408739096013205340521690709163","18915100124700271768726633669954250070","151910279444465232166443135613036976284","61438338837649021389953192992632816007","194814122904627161923477948449293440994","8277720136075038132304629891421454597","90508103152731987330941470507659237108","340099106733659524315839078767477232491","340050056811134544101168156987092435477","191306270472402699590750471032265889795","4530662870743485691830186206232493668","44574774519568376306632805951238251479","151910279444465232166443135613036976284","61438338837649021389953192992632816007","51613486602451999252808362294013322564","316061189762166060734423683218403700324","32131382725752833187331578223321921027","88707298645867082132052367113936103875","283959733187147642282502136816214652061","203181149469070667871567673603859900593","232064454510282542634882589328076166519","335724076771346523461445951989230672239","122563393576851323498751052357489052324","72238683474172155385711118385839588641","330418492821063782695026766889391844044","69397776400337062263536303952354690816","239723717280750479248066639993683509175","299136263106185869868473198562387746506","125486347643006774388658898310905579162","199096049172044421313198367572505376301","213265169961577845322669725800024615423","94950816428442125624258941404143352686","105101725757588877300941185121928781909","211381085657079965082381460661151691928","274662738054428047055725131053783164581","288418167944064742959509063799543642662","330418492821063782695026766889391844044","69397776400337062263536303952354690816","85748124197968521042647534244147971633","310395216172116110067092936831766149223","318961952614543340689012947135721551328","211137264649879351832665432178949219279","111631051412808973606235555436248607921","72524956192364886975531271841877689976","53981268479057762986172758817019465999","137108396849019348812156602930773057990"]},"signature_type":"Line"},{"deprecated":false,"source":"https://github.com/powerdns/pdns/commit/8cb2740c8468d48047cf40870e6373bdce833c60","target":{"function":"serviceMain","file":"pdns/recursordist/rec-main.cc"},"id":"CVE-2023-50868-f306e487","signature_version":"v1","digest":{"length":9856,"function_hash":"121586944806941754096006017020078543503"},"signature_type":"Function"},{"deprecated":false,"signature_version":"v1","target":{"function":"BOOST_AUTO_TEST_CASE","file":"pdns/recursordist/test-syncres_cc4.cc"},"id":"CVE-2023-50868-f7421bc9","source":"https://github.com/powerdns/pdns/commit/9a555d9e76e9078fccd7ac0d6cbfbd705be6ebfd","digest":{"length":3299,"function_hash":"229697938078003118662761624112347105339"},"signature_type":"Function"}],"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"38"}]},{"events":[{"introduced":"0"},{"last_affected":"39"}]},{"events":[{"introduced":"0"},{"last_affected":"10.0"}]},{"events":[{"introduced":"0"},{"last_affected":"11.0"}]},{"events":[{"introduced":"0"},{"last_affected":"7.0"}]},{"events":[{"introduced":"0"},{"last_affected":"8.2"}]},{"events":[{"introduced":"0"},{"last_affected":"8.4"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}