CVE-2023-31442 - Akka Async DNS resolver has insufficient entropy to protect against DNS poisoningSep 10, 2025Knowledge
Article DetailsDetailsHelp DetailsSecurity scans may detect CVE-2023-31442 when scanning the Neo4j Database. This vulnerability is detected in Akka’s async-dns resolver, which is used by Akka Discovery in DNS mode and transitively by Akka Cluster Bootstrap. Impact Neo4j Causal Cluster implementation contains Lightbend's akka-actor library but does not use the async-dns resolver affected by CVE-2023-31442. As async-dns resolver is not used, it is not possible to use the mentioned exploit. Affected but not Impacted Products and Versions Neo4j Database Server 4.4Neo4j Database Server 5 Akka has been removed from Neo4j Database 2025.x onwards.InformationTitleCVE-2023-31442 - Akka Async DNS resolver has insufficient entropy to protect against DNS poisoningArticle Created Date3/15/2024, 10:54 PMURL Name22722720068499-CVE-2023-31442-Akka-Async-DNS-resolver-has-insufficient-entropy-to-protect-against-DNS-poisoningLast Modified Date9/10/2025, 7:44 AM