CLEANSTART-2026-GZ56197

    Dashboard / Vulnerabilities / CLEANSTART-2026-GZ56197

    CLEANSTART-2026-GZ56197

    Published: 31 Oct 2026Last Modified: 31 Oct 2026
    Upstream:
    CVE-2023-50868

    Summary: Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via D...

    Details: CVE-2023-50868 affects multiple packages. The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. See references for individual vulnerability details.

    References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GZ56197.json, https://osv.dev/vulnerability/CVE-2023-50868, https://nvd.nist.gov/vuln/detail/CVE-2023-50868

    Affected packages

    Package

    Name: unbound

    Purl: pkg:apk/cleanstart/unbound

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.19.1-r0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLEANSTART-2026-GZ56197 | CVE-DB