csaf_suse - suse-su-2025:0071-1

Vulnerability from csaf_suse

Published

2025-01-10 16:54

Modified

2025-01-10 16:54

Summary

Security update for dnsmasq

Notes

Title of the patch

Security update for dnsmasq

Description of the patch

This update for dnsmasq fixes the following issues: - Version update to 2.90: - CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823) - CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219826) - CVE-2023-28450: Default maximum EDNS.0 UDP packet size should be 1232. (bsc#1209358)

Patchnames

SUSE-2025-71,SUSE-SLE-Micro-5.3-2025-71,SUSE-SLE-Micro-5.4-2025-71,SUSE-SLE-Micro-5.5-2025-71,SUSE-SLE-Module-Basesystem-15-SP6-2025-71,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-71,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-71,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-71,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-71,SUSE-SLE-Product-SLED-15-SP4-LTSS-2025-71,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-71,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-71,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-71,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-71,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-71,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-71,openSUSE-Leap-Micro-5.5-2025-71,openSUSE-SLE-15.6-2025-71

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for dnsmasq",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for dnsmasq fixes the following issues:\n\n- Version update to 2.90:\n- CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823)\n- CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219826)\n- CVE-2023-28450: Default maximum EDNS.0 UDP packet size should be 1232. (bsc#1209358)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2025-71,SUSE-SLE-Micro-5.3-2025-71,SUSE-SLE-Micro-5.4-2025-71,SUSE-SLE-Micro-5.5-2025-71,SUSE-SLE-Module-Basesystem-15-SP6-2025-71,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-71,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-71,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-71,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-71,SUSE-SLE-Product-SLED-15-SP4-LTSS-2025-71,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-71,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-71,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-71,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-71,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-71,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-71,openSUSE-Leap-Micro-5.5-2025-71,openSUSE-SLE-15.6-2025-71",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0071-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2025:0071-1",
            url: "https://www.suse.com/support/update/announcement/2025/suse-su-20250071-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2025:0071-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020094.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200344",
            url: "https://bugzilla.suse.com/1200344",
         },
         {
            category: "self",
            summary: "SUSE Bug 1207174",
            url: "https://bugzilla.suse.com/1207174",
         },
         {
            category: "self",
            summary: "SUSE Bug 1209358",
            url: "https://bugzilla.suse.com/1209358",
         },
         {
            category: "self",
            summary: "SUSE Bug 1214884",
            url: "https://bugzilla.suse.com/1214884",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219823",
            url: "https://bugzilla.suse.com/1219823",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219826",
            url: "https://bugzilla.suse.com/1219826",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-28450 page",
            url: "https://www.suse.com/security/cve/CVE-2023-28450/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-50387 page",
            url: "https://www.suse.com/security/cve/CVE-2023-50387/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-50868 page",
            url: "https://www.suse.com/security/cve/CVE-2023-50868/",
         },
      ],
      title: "Security update for dnsmasq",
      tracking: {
         current_release_date: "2025-01-10T16:54:22Z",
         generator: {
            date: "2025-01-10T16:54:22Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2025:0071-1",
         initial_release_date: "2025-01-10T16:54:22Z",
         revision_history: [
            {
               date: "2025-01-10T16:54:22Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "dnsmasq-2.90-150400.16.3.1.aarch64",
                        product: {
                           name: "dnsmasq-2.90-150400.16.3.1.aarch64",
                           product_id: "dnsmasq-2.90-150400.16.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                        product: {
                           name: "dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                           product_id: "dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "dnsmasq-2.90-150400.16.3.1.i586",
                        product: {
                           name: "dnsmasq-2.90-150400.16.3.1.i586",
                           product_id: "dnsmasq-2.90-150400.16.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dnsmasq-utils-2.90-150400.16.3.1.i586",
                        product: {
                           name: "dnsmasq-utils-2.90-150400.16.3.1.i586",
                           product_id: "dnsmasq-utils-2.90-150400.16.3.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "dnsmasq-2.90-150400.16.3.1.ppc64le",
                        product: {
                           name: "dnsmasq-2.90-150400.16.3.1.ppc64le",
                           product_id: "dnsmasq-2.90-150400.16.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                        product: {
                           name: "dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                           product_id: "dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "dnsmasq-2.90-150400.16.3.1.s390x",
                        product: {
                           name: "dnsmasq-2.90-150400.16.3.1.s390x",
                           product_id: "dnsmasq-2.90-150400.16.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dnsmasq-utils-2.90-150400.16.3.1.s390x",
                        product: {
                           name: "dnsmasq-utils-2.90-150400.16.3.1.s390x",
                           product_id: "dnsmasq-utils-2.90-150400.16.3.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "dnsmasq-2.90-150400.16.3.1.x86_64",
                        product: {
                           name: "dnsmasq-2.90-150400.16.3.1.x86_64",
                           product_id: "dnsmasq-2.90-150400.16.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                        product: {
                           name: "dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                           product_id: "dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Micro 5.3",
                        product: {
                           name: "SUSE Linux Enterprise Micro 5.3",
                           product_id: "SUSE Linux Enterprise Micro 5.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-micro:5.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Micro 5.4",
                        product: {
                           name: "SUSE Linux Enterprise Micro 5.4",
                           product_id: "SUSE Linux Enterprise Micro 5.4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-micro:5.4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Micro 5.5",
                        product: {
                           name: "SUSE Linux Enterprise Micro 5.5",
                           product_id: "SUSE Linux Enterprise Micro 5.5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-micro:5.5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                           product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-basesystem:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Proxy 4.3",
                        product: {
                           name: "SUSE Manager Proxy 4.3",
                           product_id: "SUSE Manager Proxy 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-proxy:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Server 4.3",
                        product: {
                           name: "SUSE Manager Server 4.3",
                           product_id: "SUSE Manager Server 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-server:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap Micro 5.5",
                        product: {
                           name: "openSUSE Leap Micro 5.5",
                           product_id: "openSUSE Leap Micro 5.5",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap-micro:5.5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.6",
                        product: {
                           name: "openSUSE Leap 15.6",
                           product_id: "openSUSE Leap 15.6",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
               product_id: "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
               product_id: "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
               product_id: "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
               product_id: "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
               product_id: "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
               product_id: "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
               product_id: "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
               product_id: "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
               product_id: "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
               product_id: "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of openSUSE Leap Micro 5.5",
               product_id: "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of openSUSE Leap Micro 5.5",
               product_id: "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of openSUSE Leap Micro 5.5",
               product_id: "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap Micro 5.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-2.90-150400.16.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-utils-2.90-150400.16.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
            },
            product_reference: "dnsmasq-utils-2.90-150400.16.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-utils-2.90-150400.16.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
            },
            product_reference: "dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-utils-2.90-150400.16.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
            },
            product_reference: "dnsmasq-utils-2.90-150400.16.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dnsmasq-utils-2.90-150400.16.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
            },
            product_reference: "dnsmasq-utils-2.90-150400.16.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-28450",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-28450",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-28450",
               url: "https://www.suse.com/security/cve/CVE-2023-28450",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209358 for CVE-2023-28450",
               url: "https://bugzilla.suse.com/1209358",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:54:22Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-28450",
      },
      {
         cve: "CVE-2023-50387",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-50387",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-50387",
               url: "https://www.suse.com/security/cve/CVE-2023-50387",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219823 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1219823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220717 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1220717",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221586 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1221586",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:54:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-50387",
      },
      {
         cve: "CVE-2023-50868",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-50868",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
               "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
               "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
               "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-50868",
               url: "https://www.suse.com/security/cve/CVE-2023-50868",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219823 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1219823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219826 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1219826",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221586 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1221586",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Proxy 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.s390x",
                  "SUSE Manager Server 4.3:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.ppc64le",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap 15.6:dnsmasq-utils-2.90-150400.16.3.1.x86_64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.aarch64",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.s390x",
                  "openSUSE Leap Micro 5.5:dnsmasq-2.90-150400.16.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:54:22Z",
               details: "important",
            },
         ],
         title: "CVE-2023-50868",
      },
   ],
}

cve-2023-28450

Vulnerability from cvelistv5

Published

2023-03-15 00:00

Modified

2025-02-26 21:21

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

References

▼	URL	Tags
	https://thekelleys.org.uk/dnsmasq/doc.html
	https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
	https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG
	https://capec.mitre.org/data/definitions/495.html
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/	vendor-advisory

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T12:38:25.359Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://thekelleys.org.uk/dnsmasq/doc.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://capec.mitre.org/data/definitions/495.html",
               },
               {
                  name: "FEDORA-2023-828bf01834",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/",
               },
               {
                  name: "FEDORA-2023-eeca11a4df",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 7.5,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "NONE",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2023-28450",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-26T21:21:11.576113Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        description: "CWE-noinfo Not enough information",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-26T21:21:21.124Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-04-17T00:00:00.000Z",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://thekelleys.org.uk/dnsmasq/doc.html",
            },
            {
               url: "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5",
            },
            {
               url: "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG",
            },
            {
               url: "https://capec.mitre.org/data/definitions/495.html",
            },
            {
               name: "FEDORA-2023-828bf01834",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/",
            },
            {
               name: "FEDORA-2023-eeca11a4df",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-28450",
      datePublished: "2023-03-15T00:00:00.000Z",
      dateReserved: "2023-03-15T00:00:00.000Z",
      dateUpdated: "2025-02-26T21:21:21.124Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-50387

Vulnerability from cvelistv5

Published

2024-02-14 00:00

Modified

2024-08-02 22:16

Severity ?

Summary

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

References

▼	URL	Tags
	https://www.athene-center.de/aktuelles/key-trap
	https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
	https://kb.isc.org/docs/cve-2023-50387
	https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
	https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/
	https://news.ycombinator.com/item?id=39367411
	https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/
	https://www.isc.org/blogs/2024-bind-security-release/
	https://news.ycombinator.com/item?id=39372384
	https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
	https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html
	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387
	https://access.redhat.com/security/cve/CVE-2023-50387
	https://bugzilla.suse.com/show_bug.cgi?id=1219823
	https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf
	http://www.openwall.com/lists/oss-security/2024/02/16/2	mailing-list
	http://www.openwall.com/lists/oss-security/2024/02/16/3	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/	vendor-advisory
	https://security.netapp.com/advisory/ntap-20240307-0007/
	https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T22:16:46.692Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.athene-center.de/aktuelles/key-trap",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://news.ycombinator.com/item?id=39367411",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.isc.org/blogs/2024-bind-security-release/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://news.ycombinator.com/item?id=39372384",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
               },
               {
                  name: "FEDORA-2024-2e26eccfcb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
               },
               {
                  name: "FEDORA-2024-e24211eff0",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
               },
               {
                  name: "FEDORA-2024-21310568fa",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
               },
               {
                  name: "FEDORA-2024-b0f9656a76",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
               },
               {
                  name: "FEDORA-2024-4e36df9dfd",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
               },
               {
                  name: "FEDORA-2024-499b9be35f",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  name: "FEDORA-2024-c36c448396",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  name: "FEDORA-2024-c967c7d287",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
               },
               {
                  name: "FEDORA-2024-e00eceb11c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
               },
               {
                  name: "FEDORA-2024-fae88b73eb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240307-0007/",
               },
               {
                  name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-10T16:14:16.780094",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://www.athene-center.de/aktuelles/key-trap",
            },
            {
               url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
            },
            {
               url: "https://kb.isc.org/docs/cve-2023-50387",
            },
            {
               url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
            },
            {
               url: "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/",
            },
            {
               url: "https://news.ycombinator.com/item?id=39367411",
            },
            {
               url: "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
            },
            {
               url: "https://www.isc.org/blogs/2024-bind-security-release/",
            },
            {
               url: "https://news.ycombinator.com/item?id=39372384",
            },
            {
               url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
            },
            {
               url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
            },
            {
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
            },
            {
               url: "https://access.redhat.com/security/cve/CVE-2023-50387",
            },
            {
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
            },
            {
               url: "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
            },
            {
               name: "FEDORA-2024-2e26eccfcb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
            },
            {
               name: "FEDORA-2024-e24211eff0",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
            },
            {
               name: "FEDORA-2024-21310568fa",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
            },
            {
               name: "FEDORA-2024-b0f9656a76",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
            },
            {
               name: "FEDORA-2024-4e36df9dfd",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
            },
            {
               name: "FEDORA-2024-499b9be35f",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               name: "FEDORA-2024-c36c448396",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               name: "FEDORA-2024-c967c7d287",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
            },
            {
               name: "FEDORA-2024-e00eceb11c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
            },
            {
               name: "FEDORA-2024-fae88b73eb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240307-0007/",
            },
            {
               name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-50387",
      datePublished: "2024-02-14T00:00:00",
      dateReserved: "2023-12-07T00:00:00",
      dateUpdated: "2024-08-02T22:16:46.692Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-50868

Vulnerability from cvelistv5

Published

2024-02-14 00:00

Modified

2024-08-02 22:23

Severity ?

Summary

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

References

▼	URL	Tags
	https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
	https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
	https://www.isc.org/blogs/2024-bind-security-release/
	https://datatracker.ietf.org/doc/html/rfc5155
	https://kb.isc.org/docs/cve-2023-50868
	https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
	https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html
	https://access.redhat.com/security/cve/CVE-2023-50868
	https://bugzilla.suse.com/show_bug.cgi?id=1219826
	http://www.openwall.com/lists/oss-security/2024/02/16/2	mailing-list
	http://www.openwall.com/lists/oss-security/2024/02/16/3	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/	vendor-advisory
	https://security.netapp.com/advisory/ntap-20240307-0008/
	https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T22:23:43.905Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.isc.org/blogs/2024-bind-security-release/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://datatracker.ietf.org/doc/html/rfc5155",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-50868",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-50868",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
               },
               {
                  name: "FEDORA-2024-2e26eccfcb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
               },
               {
                  name: "FEDORA-2024-e24211eff0",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
               },
               {
                  name: "FEDORA-2024-21310568fa",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
               },
               {
                  name: "FEDORA-2024-b0f9656a76",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
               },
               {
                  name: "FEDORA-2024-4e36df9dfd",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
               },
               {
                  name: "FEDORA-2024-499b9be35f",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  name: "FEDORA-2024-c36c448396",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  name: "FEDORA-2024-c967c7d287",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
               },
               {
                  name: "FEDORA-2024-e00eceb11c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
               },
               {
                  name: "FEDORA-2024-fae88b73eb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240307-0008/",
               },
               {
                  name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-10T16:14:14.129606",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
            },
            {
               url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
            },
            {
               url: "https://www.isc.org/blogs/2024-bind-security-release/",
            },
            {
               url: "https://datatracker.ietf.org/doc/html/rfc5155",
            },
            {
               url: "https://kb.isc.org/docs/cve-2023-50868",
            },
            {
               url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
            },
            {
               url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
            },
            {
               url: "https://access.redhat.com/security/cve/CVE-2023-50868",
            },
            {
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
            },
            {
               name: "FEDORA-2024-2e26eccfcb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
            },
            {
               name: "FEDORA-2024-e24211eff0",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
            },
            {
               name: "FEDORA-2024-21310568fa",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
            },
            {
               name: "FEDORA-2024-b0f9656a76",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
            },
            {
               name: "FEDORA-2024-4e36df9dfd",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
            },
            {
               name: "FEDORA-2024-499b9be35f",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               name: "FEDORA-2024-c36c448396",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               name: "FEDORA-2024-c967c7d287",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
            },
            {
               name: "FEDORA-2024-e00eceb11c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
            },
            {
               name: "FEDORA-2024-fae88b73eb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240307-0008/",
            },
            {
               name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-50868",
      datePublished: "2024-02-14T00:00:00",
      dateReserved: "2023-12-14T00:00:00",
      dateUpdated: "2024-08-02T22:23:43.905Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2023-28450

Vulnerability from cvelistv5

cve-2023-50387

Vulnerability from cvelistv5

cve-2023-50868

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature