CVE-2023-50387

CVE-2023-50387, dubbed "KeyTrap," is a denial-of-service vulnerability affecting various DNSSEC implementations, including those from ISC, Microsoft, and Red Hat. It exploits a design flaw in the DNSSEC protocol where an attacker can craft DNSSEC responses that force DNS resolvers to perform extensive, CPU-intensive computations by evaluating all combinations of numerous DNSKEY and RRSIG records. This unauthenticated, low-complexity attack has a CVSS score of 7.5 (High), indicating a significant potential for service disruption. While there is no public exploit code or evidence of active exploitation, the vulnerability has garnered substantial community attention and media coverage, highlighting its potential to severely impact internet access.