A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.9 | Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
| Product | Vendor | Version |
|---|---|---|
| Red Hat Enterprise Linux 8 | Red Hat | < 973e0890e5264cb075ef668661cad06b67777121 |
| Red Hat Enterprise Linux 9 | Red Hat | < 314a7ffd7c196b27eedd50cb7553029e17789b55 |
| Red Hat Enterprise Linux 9 | Red Hat | 5.1 |
| Cryostat 2 | Red Hat | < 5.1 |