{"id":"CVE-2023-7008","aliases":["ALSA-2024:2463","ALSA-2024:3203","AZL-32270","AZL-32271","AZL-35291","AZL-43171","CLSA-2024-1718895586","CLSA-2024-1718898538","CLSA-2024-1722535503","DEBIAN-CVE-2023-7008","DLA-3859-1","EUVD-2023-59200","GHSA-hwxf-wjq7-j3hm","OESA-2024-1020","OESA-2024-2262","RHSA-2024:2463","RHSA-2024:3203","RLSA-2024:2463","RLSA-2024:3203","SUSE-SU-2024:3149-1","UBUNTU-CVE-2023-7008","USN-8402-1","openSUSE-SU-2024:13665-1"],"status":"published","title":"Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00842,"percentile":0.58175,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-300"],"published":"2023-12-23T13:00:50Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"rhel-net-naming-sysattrs","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-boot-unsigned","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-container","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-devel","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-journal-remote","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-libs","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-oomd","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-pam","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-resolved","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-rpm-macros","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-udev","fixed_in":["252-32.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-container","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-devel","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-journal-remote","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-libs","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-pam","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-tests","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-udev","fixed_in":["239-82.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"systemd","fixed_in":["250.3-22"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"systemd-bootstrap","fixed_in":["250.3-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"systemd-bootstrap","fixed_in":["250.3-18"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"systemd","fixed_in":["255-20"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-container","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-devel","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-journal-remote","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-libs","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-pam","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-tests","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-udev","fixed_in":["239-51.el8_5.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-container","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-devel","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-journal-remote","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-libs","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-pam","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-tests","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-udev","fixed_in":["239-45.el8_4.3.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-boot-unsigned","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-container","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-devel","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-journal-remote","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-libs","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-oomd","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-pam","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-resolved","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-rpm-macros","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-sysusers","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-tmpfiles","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-udev","fixed_in":["252-14.el9_2.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"systemd","fixed_in":["252.21-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["255.1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["255.1-3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"systemd","fixed_in":["243-71.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"systemd","fixed_in":["243-74.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","fixed_in":["243-73.oe2003sp4","243-81.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"systemd","fixed_in":["249-63.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"systemd","fixed_in":["249-63.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"systemd","fixed_in":["249-63.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-container-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debugsource","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-devel","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-libs-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-oomd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-pam-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-resolved-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-sysusers-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-tmpfiles-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-udev-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rhel-net-naming-sysattrs","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-boot-unsigned-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debugsource","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-rpm-macros","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-sysusers-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-tmpfiles-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-boot-unsigned","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-boot-unsigned-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-container-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-debugsource","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-journal-remote-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-libs-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-oomd-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-pam-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-resolved-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-standalone-sysusers-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-standalone-tmpfiles-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-udev-debuginfo","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"systemd","fixed_in":["0:252-32.el9_4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"systemd","fixed_in":["0:239-82.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"systemd","fixed_in":["249.17-150400.8.43.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"systemd","fixed_in":["249.11-0ubuntu3.21"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"systemd","fixed_in":["254.8-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"rhel-net-naming-sysattrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-32.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-82.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"250.3-22"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"systemd-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"250.3-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"systemd-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"250.3-18"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-20"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252.21-1~deb12u1"}]}],"versions":["252.11-1","252.11-1~deb12u1","252.12-1~deb12u1","252.14-1~deb12u1","252.16-1~deb12u1","252.17-1~deb12u1","252.18-1~deb12u1","252.19-1~deb12u1","252.20-1~deb12u1","252.6-1","252.6-1+loong64"]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.1-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"247.3-7+deb11u6"}]}],"versions":["247.3-6","247.3-7","247.3-7+deb11u1","247.3-7+deb11u2","247.3-7+deb11u3","247.3-7+deb11u4","247.3-7+deb11u5"],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-71.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-74.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-73.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-63.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-63.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-63.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-81.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-sysusers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-tmpfiles-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rhel-net-naming-sysattrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-boot-unsigned-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-sysusers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-tmpfiles-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-boot-unsigned-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-standalone-sysusers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-standalone-tmpfiles-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-32.el9_4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-82.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.43.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["204-0ubuntu18","204-0ubuntu19","204-5ubuntu3","204-5ubuntu5","204-5ubuntu6","204-5ubuntu7","204-5ubuntu8","204-5ubuntu9","204-5ubuntu10","204-5ubuntu11","204-5ubuntu13","204-5ubuntu14","204-5ubuntu15","204-5ubuntu16","204-5ubuntu17","204-5ubuntu18","204-5ubuntu19","204-5ubuntu20","204-5ubuntu20.2","204-5ubuntu20.3","204-5ubuntu20.4","204-5ubuntu20.5","204-5ubuntu20.6","204-5ubuntu20.7","204-5ubuntu20.8","204-5ubuntu20.9","204-5ubuntu20.10","204-5ubuntu20.11","204-5ubuntu20.12","204-5ubuntu20.13","204-5ubuntu20.14","204-5ubuntu20.15","204-5ubuntu20.18","204-5ubuntu20.19","204-5ubuntu20.20","204-5ubuntu20.21","204-5ubuntu20.22","204-5ubuntu20.24","204-5ubuntu20.25","204-5ubuntu20.26","204-5ubuntu20.28","204-5ubuntu20.29","204-5ubuntu20.31","204-5ubuntu20.31+esm2","204-5ubuntu20.31+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6","229-4ubuntu21.8","229-4ubuntu21.9","229-4ubuntu21.10","229-4ubuntu21.15","229-4ubuntu21.16","229-4ubuntu21.17","229-4ubuntu21.19","229-4ubuntu21.21","229-4ubuntu21.22","229-4ubuntu21.23","229-4ubuntu21.27","229-4ubuntu21.28","229-4ubuntu21.29","229-4ubuntu21.31","229-4ubuntu21.31+esm1","229-4ubuntu21.31+esm3","229-4ubuntu21.31+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26","237-3ubuntu10.28","237-3ubuntu10.29","237-3ubuntu10.31","237-3ubuntu10.33","237-3ubuntu10.38","237-3ubuntu10.39","237-3ubuntu10.40","237-3ubuntu10.41","237-3ubuntu10.42","237-3ubuntu10.43","237-3ubuntu10.44","237-3ubuntu10.45","237-3ubuntu10.46","237-3ubuntu10.47","237-3ubuntu10.48","237-3ubuntu10.49","237-3ubuntu10.50","237-3ubuntu10.51","237-3ubuntu10.52","237-3ubuntu10.53","237-3ubuntu10.54","237-3ubuntu10.56","237-3ubuntu10.57","237-3ubuntu10.57+esm2","237-3ubuntu10.57+esm3","237-3ubuntu10.57+esm4","237-3ubuntu10.57+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["242-7ubuntu3","243-2ubuntu1","243-3ubuntu1","244-3ubuntu1","244.1-0ubuntu2","244.1-0ubuntu3","244.2-1ubuntu1","244.3-1ubuntu1","245.2-1ubuntu1","245.2-1ubuntu2","245.4-2ubuntu1","245.4-4ubuntu1","245.4-4ubuntu3","245.4-4ubuntu3.1","245.4-4ubuntu3.2","245.4-4ubuntu3.3","245.4-4ubuntu3.4","245.4-4ubuntu3.5","245.4-4ubuntu3.6","245.4-4ubuntu3.7","245.4-4ubuntu3.10","245.4-4ubuntu3.11","245.4-4ubuntu3.13","245.4-4ubuntu3.14","245.4-4ubuntu3.15","245.4-4ubuntu3.16","245.4-4ubuntu3.17","245.4-4ubuntu3.18","245.4-4ubuntu3.19","245.4-4ubuntu3.20","245.4-4ubuntu3.21","245.4-4ubuntu3.22","245.4-4ubuntu3.23","245.4-4ubuntu3.24","245.4-4ubuntu3.24+esm1","245.4-4ubuntu3.24+esm3","245.4-4ubuntu3.24+esm4","245.4-4ubuntu3.24+esm5","245.4-4ubuntu3.24+esm6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.21"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15","249.11-0ubuntu3.16","249.11-0ubuntu3.17","249.11-0ubuntu3.19","249.11-0ubuntu3.20"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.21"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15","249.11-0ubuntu3.16","249.11-0ubuntu3.17","249.11-0ubuntu3.19","249.11-0ubuntu3.20"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.4-1ubuntu8.16"}]}],"versions":["253.5-1ubuntu6","253.5-1ubuntu7","255.2-3ubuntu2","255.4-1ubuntu5","255.4-1ubuntu6","255.4-1ubuntu7","255.4-1ubuntu8","255.4-1ubuntu8.1","255.4-1ubuntu8.2","255.4-1ubuntu8.4","255.4-1ubuntu8.5","255.4-1ubuntu8.6","255.4-1ubuntu8.8","255.4-1ubuntu8.10","255.4-1ubuntu8.11","255.4-1ubuntu8.12","255.4-1ubuntu8.14","255.4-1ubuntu8.15"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.9-0ubuntu2.5"}]}],"versions":["257.4-1ubuntu3","257.6-1ubuntu1","257.7-1ubuntu1","257.7-1ubuntu3","257.8-0ubuntu2","257.9-0ubuntu1","257.9-0ubuntu2","257.9-0ubuntu2.1","257.9-0ubuntu2.3","257.9-0ubuntu2.4"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.8-4.1"}]}]}],"products":[{"vendor":"red hat","product":"cryostat 2"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2463","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3203","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-7008","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222261","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222672","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/systemd/systemd/issues/25676","tags":["x_transferred","Issue Tracking","report","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241122-0004/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL"},{"url":"https://security.netapp.com/advisory/ntap-20241122-0004"},{"url":"https://github.com/advisories/GHSA-hwxf-wjq7-j3hm"},{"url":"https://bugzilla.redhat.com/2222672","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2463.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3203.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1718895586.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1718898538.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1722535503.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/7xxx/CVE-2023-7008.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-7008","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1020","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2262","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16182","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16354","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16810","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16952","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-20757","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22278","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22427","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22430","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22443","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-23756","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26133","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26643","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-29441","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5070","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5988","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-6090","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-7026","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2463.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-7008","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-18302","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22426","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-2857","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5863","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5991","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3203.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2463","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3203","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243149-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218297","tags":["report"]},{"url":"https://bugzilla.suse.com/1221479","tags":["report"]},{"url":"https://bugzilla.suse.com/1226414","tags":["report"]},{"url":"https://bugzilla.suse.com/1228091","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-7008","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-7008","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8402-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40226","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-7008","title":"Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:00:50.515Z","modified":"2026-11-02T22:43:01.5Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-300"],"updated_at":"2026-11-03T00:01:30.510858Z"}],"euvd":[{"id":"EUVD-2023-59200","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:00:50Z","modified":"2026-11-02T22:43:01Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T05:08:36.239358Z"}],"ghsa":[{"id":"GHSA-hwxf-wjq7-j3hm","title":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept...","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T15:30:17Z","modified":"2026-10-15T00:30:45Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-300"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07.573Z","modified":"2026-11-02T23:17:19.6Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-300"],"updated_at":"2026-11-03T06:40:49.610767Z"}],"osv":[{"id":"AZL-32270","title":"CVE-2023-7008 affecting package systemd for versions less than 250.3-22","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07Z","modified":"2026-04-21T04:26:44.938502Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-32271","title":"CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-13","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07Z","modified":"2026-04-21T04:26:45.057231Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-35291","title":"CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-18","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-43171","title":"CVE-2023-7008 affecting package systemd for versions less than 255-20","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"CVE-2023-7008","title":"Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:00:50.515Z","modified":"2026-11-04T02:30:44.097784449Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-300"],"updated_at":"2026-11-04T02:54:44.889498Z"},{"id":"DEBIAN-CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:07.573Z","modified":"2026-11-03T09:47:39.592224962Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"OESA-2024-1020","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)","status":"published","published":"2024-01-05T11:06:28Z","modified":"2026-08-18T01:18:12.242148008Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-2262","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)","status":"published","published":"2024-10-18T11:07:44Z","modified":"2026-08-18T01:17:34.994365632Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:2463","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2024-09-16T16:17:10Z","modified":"2026-08-05T10:19:01Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3203","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2024-09-16T16:17:19Z","modified":"2026-08-05T10:19:29Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:3203","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:06.498755Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.","status":"published","published":"2023-12-23T13:15:00Z","modified":"2026-10-17T12:56:43.382551856Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:2463","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:44.809052122Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3203","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.951730464Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1718895586","title":"systemd: Fix of CVE-2023-7008","description":"- CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC-\n  signed domains without a signature to mitigate man-in-the-middle attacks","status":"published","published":"2024-06-20T14:59:49Z","modified":"2026-06-01T00:33:22.552993503Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1718898538","title":"systemd: Fix of CVE-2023-7008","description":"- CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC-\n  signed domains without a signature to mitigate man-in-the-middle attacks","status":"published","published":"2024-06-20T15:49:01Z","modified":"2026-06-01T00:33:20.290900835Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1722535503","title":"systemd: Fix of CVE-2023-7008","description":"- CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC-\n  signed domains without a signature to mitigate man-in-the-middle attacks","status":"published","published":"2024-08-01T18:05:07Z","modified":"2026-06-01T00:30:09.249248124Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-3859-1","title":"systemd - security update","status":"published","published":"2024-09-02T00:00:00Z","modified":"2026-03-09T01:21:32.304176Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:13665-1","title":"libsystemd0-254.8-4.1 on GA media","description":"These are all security issues fixed in the libsystemd0-254.8-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:15:03.758923Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:2463","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2024-05-10T14:32:36.204878Z","modified":"2026-02-04T10:15:05.764908Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:3149-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when DNSSEC=yes (bsc#1218297)\n\nOther fixes:\n- Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)\n- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)\n- Skip redundant dependencies specified the LSB description that references the file name of the service itself for early boot scripts (bsc#1221479).\n","status":"published","published":"2024-09-05T15:05:38Z","modified":"2026-02-04T04:30:37.110283Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-8402-1","title":"systemd vulnerabilities","description":"It was discovered that systemd-nspawn incorrectly handled certain optional\nconfiguration files. A local attacker could possibly use this issue to\nescape to the host system and execute arbitrary code. (CVE-2026-40226)\n\nIt was discovered that systemd-resolved incorrectly validated DNSSEC\nrecords for signed domains. An attacker could possibly use this issue to\nmanipulate DNS records. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-7008)","status":"published","published":"2026-06-08T13:17:14Z","modified":"2026-06-08T23:03:52.339660669Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}