A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2463 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2463 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2463 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-509 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c79658eedf advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b8312ca5b3 advisory.

  - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of     DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS     resolver) to manipulate records. (CVE-2023-7008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197140	EulerOS Virtualization 2.11.0 : systemd (EulerOS-SA-2024-1641)	Nessus	Huawei Local Security Checks	medium
197122	EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2024-1622)	Nessus	Huawei Local Security Checks	medium
196985	Rocky Linux 9 : systemd (RLSA-2024:2463)	Nessus	Rocky Linux Local Security Checks	medium
195045	Oracle Linux 9 : systemd (ELSA-2024-2463)	Nessus	Oracle Linux Local Security Checks	medium
194803	RHEL 9 : systemd (RHSA-2024:2463)	Nessus	Red Hat Local Security Checks	medium
193630	EulerOS Virtualization 2.10.1 : systemd (EulerOS-SA-2024-1557)	Nessus	Huawei Local Security Checks	medium
193615	EulerOS Virtualization 2.10.0 : systemd (EulerOS-SA-2024-1538)	Nessus	Huawei Local Security Checks	medium
193020	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1520)	Nessus	Huawei Local Security Checks	medium
192999	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1499)	Nessus	Huawei Local Security Checks	medium
191983	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2024-1349)	Nessus	Huawei Local Security Checks	medium
191971	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2024-1327)	Nessus	Huawei Local Security Checks	medium
191836	EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1230)	Nessus	Huawei Local Security Checks	medium
191823	EulerOS 2.0 SP11 : systemd (EulerOS-SA-2024-1252)	Nessus	Huawei Local Security Checks	medium
190069	Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2024-509)	Nessus	Amazon Linux Local Security Checks	medium
189673	Fedora 38 : systemd (2024-c79658eedf)	Nessus	Fedora Local Security Checks	medium
189385	Fedora 39 : systemd (2024-b8312ca5b3)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-7008

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium