Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 2/13/24 14:34, Solar Designer wrote:
> It's not great that we're adding to a thread on Unbound, but since we
> already started...

Sorry, in hindsight I probably should have started a new thread.

For those who want more details on the CVE-2023-50387 flaw itself,
the researchers have now published their paper at
https://www.athene-center.de/en/keytrap (see the PDF link in the
"Technical Report" section).

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris