Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-bindUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-docUpgrade dnsmasq-utilsUpgrade bind9.16-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-develUpgrade unbound-develUpgrade bind9.16-develUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-libsUpgrade bind-export-libsUpgrade bind-dyndb-ldapUpgrade unboundUpgrade bind9.16-libsUpgrade dnsmasqUpgrade python3-unboundUpgrade bind9.16-utilsUpgrade bind9.16-docUpgrade python3-bind9.16Upgrade bind-docUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade unbound-libsUpgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-sdb | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade dnsmasqUpgrade pdns-recursorUpgrade unbound | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-chrootUpgrade bind-sdb-chrootUpgrade unbound-develUpgrade bind-pkcs11-libsUpgrade unboundUpgrade bind-lite-develUpgrade python3-unboundUpgrade bind-pkcs11-develUpgrade unbound-anchorUpgrade unbound-utilsUpgrade bind-utilsUpgrade dnsmasqUpgrade unbound-libsUpgrade bind-export-libsUpgrade dnsmasq-utilsUpgrade bind-export-develUpgrade bind-sdbUpgrade python2-unboundUpgrade dnsmasq-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bindUpgrade bind-pkcs11-utilsUpgrade unbound-debuginfoUpgrade bind-devel | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-utils-debuginfoUpgrade bind-dlz-ldapUpgrade bind-chrootUpgrade unbound-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade python3-unbound-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libsUpgrade unbound-anchor-debuginfoUpgrade bind-pkcs11Upgrade bind-pkcs11-debuginfoUpgrade bind-dnssec-docUpgrade dnsmasqUpgrade python3-unboundUpgrade bind-debuginfoUpgrade bind-dlz-sqlite3Upgrade unbound-utilsUpgrade dnsmasq-utilsUpgrade bind-dlz-sqlite3-debuginfoUpgrade unbound-debugsourceUpgrade bind-utilsUpgrade unbound-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade dnsmasq-debugsourceUpgrade bind-pkcs11-develUpgrade unbound-anchorUpgrade unbound-develUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade unboundUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dnssec-utilsUpgrade unbound-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-develUpgrade bind-dlz-filesystem-debuginfoUpgrade python3-bindUpgrade bind | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-export-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bindUpgrade dhclientUpgrade bind-licenseUpgrade bind-dyndb-ldapUpgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-utilsUpgrade dhcpUpgrade dhcp-develUpgrade bind-develUpgrade bind-libsUpgrade dhcp-debuginfoUpgrade dhcp-commonUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-lite-devel | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade dnsmasqUpgrade systemdUpgrade bind9Upgrade unboundUpgrade pdns-recursorUpgrade dnsjavaUpgrade knot-resolver | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade dnsmasqUpgrade dnsmasq-develUpgrade bind918Upgrade bind916Upgrade unboundUpgrade powerdns-recursorUpgrade FreeBSDUpgrade bind9-devel | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-timesyncdUpgrade systemd-libs | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-udev-compatUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-networkd | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-udevUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-containerUpgrade systemd-nspawn | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade python2-unboundUpgrade python3-unboundUpgrade unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade unboundUpgrade dhcpUpgrade dhcp-develUpgrade dhcp-libsUpgrade python3-bindUpgrade bind9.16Upgrade dhcp-relayUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade dhclientUpgrade bind9.16-licenseUpgrade bind-export-libsUpgrade bind-export-develUpgrade unbound-pythonUpgrade bind-sdb-chrootUpgrade bind9.16-utilsUpgrade python3-unboundUpgrade bind9.16-chrootUpgrade bind9.16-libsUpgrade dhcp-commonUpgrade bind-pkcs11-develUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind9.16-develUpgrade bind-dnssec-docUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade dnsmasqUpgrade dhcp-serverUpgrade dhcp-clientUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-docUpgrade unbound-libsUpgrade unbound-develUpgrade python3-bind9.16Upgrade bind-sdbUpgrade bind-dyndb-ldapUpgrade bind-utils | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-utils-debuginfoUpgrade bind9.16Upgrade bind-dnssec-docUpgrade bind9.16-utilsUpgrade dhcp-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-docUpgrade bind9.16-debugsourceUpgrade dhclientUpgrade dhcp-server-debuginfoUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade dhcp-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade python3-bind9.16Upgrade bind-utilsUpgrade python3-unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade dhcp-commonUpgrade dnsmasqUpgrade python3-unboundUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-sdbUpgrade unbound-develUpgrade unbound-debugsourceUpgrade bind9.16-develUpgrade dhcp-client-debuginfoUpgrade dhcp-serverUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-lite-develUpgrade bind9.16-chrootUpgrade dnsmasq-utilsUpgrade dnsmasq-debuginfoUpgrade dhcp-clientUpgrade bind9.16-licenseUpgrade bind-pkcs11-utilsUpgrade dhcpUpgrade bind-dnssec-utils-debuginfoUpgrade bind-develUpgrade dhcp-relay-debuginfoUpgrade dhcp-debugsourceUpgrade dhcp-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-licenseUpgrade bind-debugsourceUpgrade unbound-libsUpgrade dhcp-develUpgrade bind9.16-libsUpgrade bind9.16-dnssec-utilsUpgrade bind-export-libs-debuginfoUpgrade unboundUpgrade dnsmasq-debugsourceUpgrade bind9.16-debuginfoUpgrade bindUpgrade bind-pkcs11-develUpgrade dhcp-relayUpgrade bind-export-libsUpgrade unbound-debuginfoUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-export-develUpgrade bind-libs-debuginfoUpgrade python3-bindUpgrade bind-dnssec-utilsUpgrade unbound-pythonUpgrade bind9.16-docUpgrade bind-dyndb-ldap-debugsource | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind-utilsUpgrade dhcp-clientUpgrade bind9.16-utilsUpgrade dnsmasqUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-sdb-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-develUpgrade bind-libs-debuginfoUpgrade bind9.16-libsUpgrade dhcp-relayUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade dhcp-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade dhcp-serverUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-debugsourceUpgrade dhcp-relay-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade dnsmasq-utilsUpgrade bind-sdb-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-develUpgrade dhcp-server-debuginfoUpgrade dhcp-debugsourceUpgrade bind9.16-chrootUpgrade bind-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-export-develUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind9.16-dnssec-utilsUpgrade dnsmasq-debugsourceUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libsUpgrade bind-dyndb-ldapUpgrade bind-debugsourceUpgrade bindUpgrade dnsmasq-debuginfo | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade unbound-pythonUpgrade libirs1601Upgrade libbind9-161Upgrade libisccfg1600Upgrade bind-develUpgrade libunbound8Upgrade libuv1Upgrade libdns1605Upgrade libisccc1600Upgrade libisc1107Upgrade libisccfg163Upgrade liblwres161Upgrade bind-chrootenvUpgrade python3-bindUpgrade libns1604Upgrade libuv-develUpgrade unbound-anchorUpgrade libisc1107-32bitUpgrade pdns-recursorUpgrade libbind9-1600Upgrade libisc1606Upgrade bindUpgrade unbound-muninUpgrade bind-utilsUpgrade bind-docUpgrade libisccc161Upgrade libdns1110Upgrade python-bindUpgrade libirs-develUpgrade unbound-develUpgrade libirs161Upgrade unbound | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade unboundUpgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub