CLEANSTART-2026-TI70958

    Dashboard / Vulnerabilities / CLEANSTART-2026-TI70958

    CLEANSTART-2026-TI70958

    Published: 31 Oct 2026Last Modified: 31 Oct 2026
    Upstream:
    CVE-2023-50387

    Summary: Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, ...

    Details: CVE-2023-50387 affects multiple packages. Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. See references for individual vulnerability details.

    References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TI70958.json, https://osv.dev/vulnerability/CVE-2023-50387, https://nvd.nist.gov/vuln/detail/CVE-2023-50387

    Affected packages

    Package

    Name: unbound

    Purl: pkg:apk/cleanstart/unbound

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.19.1-r0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLEANSTART-2026-TI70958 | CVE-DB