Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-lite-develUpgrade bind9.16-develUpgrade bind-chrootUpgrade bind-develUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind-utilsUpgrade bind-libsUpgrade dnsmasq-utilsUpgrade bind9.16-chrootUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-dnssec-docUpgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade unbound-develUpgrade bind-dyndb-ldapUpgrade dnsmasqUpgrade bind9.16-docUpgrade unbound-libsUpgrade bind-export-develUpgrade bind-export-libsUpgrade unboundUpgrade bind-docUpgrade python3-unboundUpgrade bind9.16-utilsUpgrade bind9.16-licenseUpgrade bind-sdbUpgrade python3-bind9.16Upgrade bind9.16-libsUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade pdns-recursorUpgrade unboundUpgrade knot-resolverUpgrade bindUpgrade dnsmasq | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-licenseUpgrade unbound-debuginfoUpgrade bind-libsUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade dnsmasq-debuginfoUpgrade python2-unboundUpgrade bind-libs-liteUpgrade bind-develUpgrade bindUpgrade bind-debuginfoUpgrade bind-sdbUpgrade unbound-libsUpgrade dnsmasqUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade unboundUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade unbound-utilsUpgrade unbound-develUpgrade bind-pkcs11-develUpgrade unbound-anchorUpgrade python3-unboundUpgrade bind-utilsUpgrade dnsmasq-utils | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade dnsmasqUpgrade bind-libsUpgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade unbound-debugsourceUpgrade bind-dnssec-docUpgrade unbound-utilsUpgrade bind-dlz-sqlite3Upgrade unbound-anchor-debuginfoUpgrade unbound-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utils-debuginfoUpgrade python3-unboundUpgrade bind-docUpgrade bind-chrootUpgrade bind-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-sqlite3-debuginfoUpgrade unbound-libs-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-pkcs11Upgrade bind-pkcs11-debuginfoUpgrade bind-utilsUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-dlz-mysqlUpgrade unbound-anchorUpgrade bind-dlz-filesystem-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-licenseUpgrade bind-dlz-ldap-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-debugsourceUpgrade unbound-develUpgrade bind-develUpgrade dnsmasq-debugsourceUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade bind-dnssec-utilsUpgrade unbound-debuginfoUpgrade bindUpgrade bind-dlz-mysql-debuginfoUpgrade unboundUpgrade python3-bind | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-dyndb-ldapUpgrade bindUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-export-develUpgrade dhclientUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade dhcp-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade dhcpUpgrade bind-pkcs11-develUpgrade dhcp-debuginfoUpgrade bind-libsUpgrade bind-utilsUpgrade bind-lite-develUpgrade dhcp-commonUpgrade bind-develUpgrade bind-sdb-chrootUpgrade dhcp-devel | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade knot-resolverUpgrade dnsjavaUpgrade bind9Upgrade unboundUpgrade systemdUpgrade pdns-recursorUpgrade dnsmasq | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade dnsmasq-develUpgrade bind916Upgrade unboundUpgrade dnsmasqUpgrade bind918Upgrade FreeBSDUpgrade powerdns-recursorUpgrade bind9-devel | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-container | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemdUpgrade systemd-containerUpgrade systemd-timesyncd | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemdUpgrade systemd-pamUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-udev-compat | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unboundUpgrade python3-unboundUpgrade unbound-libsUpgrade python2-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind-sdb-chrootUpgrade python3-unboundUpgrade dhclientUpgrade bind-develUpgrade bind9.16-licenseUpgrade dhcp-relayUpgrade bind9.16-chrootUpgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade dhcp-commonUpgrade bind-pkcs11-develUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade unbound-pythonUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-licenseUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade dhcpUpgrade unboundUpgrade bind9.16Upgrade dhcp-develUpgrade dhcp-libsUpgrade bind-pkcs11Upgrade bind-dyndb-ldapUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade dhcp-serverUpgrade dhcp-clientUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade dnsmasqUpgrade bind-docUpgrade bind-dnssec-docUpgrade bindUpgrade unbound-develUpgrade bind-sdbUpgrade python3-bind9.16Upgrade unbound-libsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade dnsmasq-utilsUpgrade bind-libsUpgrade bind-chroot | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade unboundUpgrade bind-export-libs-debuginfoUpgrade bind9.16-libsUpgrade bind9.16-debuginfoUpgrade dnsmasq-debugsourceUpgrade bindUpgrade dhcpUpgrade bind-export-develUpgrade unbound-pythonUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-libs-liteUpgrade python3-bindUpgrade unbound-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utilsUpgrade dhcp-relayUpgrade bind-debugsourceUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade unbound-libsUpgrade bind-develUpgrade bind-licenseUpgrade dhcp-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade dhcp-clientUpgrade dhcp-relay-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcp-develUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-docUpgrade python3-unboundUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-develUpgrade unbound-develUpgrade unbound-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind-sdbUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-chrootUpgrade bind-lite-develUpgrade dnsmasq-debuginfoUpgrade bind-docUpgrade bind-pkcs11Upgrade dhcp-commonUpgrade bind-dyndb-ldapUpgrade bind-libs-lite-debuginfoUpgrade bind-libsUpgrade dhcp-debuginfoUpgrade bind-utilsUpgrade dnsmasqUpgrade python3-bind9.16Upgrade dhcp-serverUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-utils-debuginfoUpgrade bind9.16-chrootUpgrade dhcp-server-debuginfoUpgrade dhclientUpgrade dnsmasq-utilsUpgrade bind-dnssec-docUpgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade unbound-libs-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-debuginfoUpgrade dhcp-libsUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade python3-unbound-debuginfo | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade dhcp-libsUpgrade dnsmasq-debugsourceUpgrade bind-develUpgrade bind9.16-dnssec-utilsUpgrade dhcp-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade dhcp-server-debuginfoUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-libsUpgrade bind9.16Upgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-export-libs-debuginfoUpgrade dnsmasq-utilsUpgrade bind-debugsourceUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade dhcp-debugsourceUpgrade dnsmasq-debuginfoUpgrade bindUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade dhcp-relay-debuginfoUpgrade dhcp-relayUpgrade dhcp-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-clientUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind-dnssec-utilsUpgrade bind9.16-libsUpgrade bind9.16-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-sdb-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-develUpgrade bind9.16-utilsUpgrade dhcp-serverUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind-utilsUpgrade dnsmasq | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libisc1606Upgrade libirs-develUpgrade unbound-develUpgrade libirs161Upgrade unboundUpgrade python-bindUpgrade bind-utilsUpgrade bind-docUpgrade pdns-recursorUpgrade unbound-anchorUpgrade libbind9-1600Upgrade libisc1107-32bitUpgrade bindUpgrade libdns1110Upgrade unbound-muninUpgrade libisccc161Upgrade libisccfg1600Upgrade libunbound8Upgrade libdns1605Upgrade libisccfg163Upgrade libuv1Upgrade libirs1601Upgrade liblwres161Upgrade unbound-pythonUpgrade bind-chrootenvUpgrade bind-develUpgrade python3-bindUpgrade libbind9-161Upgrade libisccc1600Upgrade libisc1107Upgrade libuv-develUpgrade libns1604 | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade unboundUpgrade dnsmasq-baseUpgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub