The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-bindUpgrade bind9.16Upgrade python3-bind9.16Upgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind9.16-develUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-develUpgrade bind9.16-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade bind-utilsUpgrade bind9.16-licenseUpgrade bind-dnssec-docUpgrade dnsmasqUpgrade unbound-libsUpgrade bind-licenseUpgrade bind-export-libsUpgrade bind-dnssec-utilsUpgrade dnsmasq-utilsUpgrade unbound-develUpgrade python3-unboundUpgrade bind9.16-docUpgrade bind-libs-liteUpgrade bind-sdbUpgrade unboundUpgrade bind-export-develUpgrade bind-dyndb-ldapUpgrade bind9.16-libsUpgrade bind | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade dnsmasqUpgrade pdns-recursorUpgrade unbound | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-chrootUpgrade unbound-anchorUpgrade bind-export-develUpgrade python2-unboundUpgrade bind-debuginfoUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade unbound-utilsUpgrade unbound-debuginfoUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade bind-develUpgrade unbound-develUpgrade bind-export-libsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade unboundUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-pkcs11Upgrade dnsmasqUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-dlz-filesystemUpgrade bind-chrootUpgrade unbound-debugsourceUpgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade unbound-anchorUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind-develUpgrade bind-dlz-mysqlUpgrade unbound-utilsUpgrade bind-dnssec-utilsUpgrade unbound-develUpgrade python3-unboundUpgrade unboundUpgrade python3-bindUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-sqlite3Upgrade unbound-anchor-debuginfoUpgrade unbound-libsUpgrade bind-debuginfoUpgrade dnsmasq-utilsUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade dnsmasqUpgrade bind-licenseUpgrade dnsmasq-debuginfoUpgrade bind-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade unbound-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bindUpgrade bind-libsUpgrade bind-docUpgrade bind-pkcs11-develUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-pkcs11Upgrade bind-dlz-ldapUpgrade bind-libs-debuginfoUpgrade dnsmasq-debugsourceUpgrade bind-debugsourceUpgrade unbound-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-ldap-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade dhcp-debuginfoUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade dhclientUpgrade bind-dyndb-ldap-debuginfoUpgrade dhcp-libsUpgrade bind-sdbUpgrade bind-dyndb-ldapUpgrade bind-licenseUpgrade bind-libsUpgrade bind-lite-develUpgrade dhcp-develUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade dhcp-commonUpgrade dhcpUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-export-develUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-chroot | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade bind9Upgrade systemdUpgrade knot-resolverUpgrade unboundUpgrade dnsmasqUpgrade dnsjavaUpgrade pdns-recursor | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Feb 6, 2026 | Feb 6, 2026 |
| Freebsd | — | Upgrade bind918Upgrade unboundUpgrade dnsmasq-develUpgrade dnsmasqUpgrade bind916Upgrade powerdns-recursorUpgrade bind9-develUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-pamUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-networkd | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-unboundUpgrade unboundUpgrade unbound-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-timesyncdUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unboundUpgrade python2-unboundUpgrade python3-unboundUpgrade unbound-libs | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compat | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-06 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5039227)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5039236)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5039227)2024-06 Cumulative Update for Microsoft Windows Server 2012 (KB5039260)2024-06 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5039214)2024-06 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5039294)2024-06 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5039217) | Jun 11, 2024 | Jun 11, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade unboundUpgrade bind9.16-docUpgrade bind-chrootUpgrade bind9.16-libsUpgrade bind-docUpgrade bind-export-develUpgrade bind9.16-utilsUpgrade bind-export-libsUpgrade dhcp-clientUpgrade bind-sdbUpgrade bind-licenseUpgrade unbound-develUpgrade bind-dyndb-ldapUpgrade bindUpgrade dnsmasqUpgrade bind-dnssec-utilsUpgrade bind-dnssec-docUpgrade python3-bind9.16Upgrade unbound-libsUpgrade bind-utilsUpgrade bind-lite-develUpgrade unbound-pythonUpgrade bind9.16-licenseUpgrade bind-sdb-chrootUpgrade dhcp-serverUpgrade dhclientUpgrade bind-pkcs11Upgrade python3-unboundUpgrade dhcpUpgrade python3-bindUpgrade bind9.16-dnssec-utilsUpgrade bind-libs-liteUpgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade dhcp-commonUpgrade bind-libsUpgrade dhcp-relayUpgrade bind9.16-chrootUpgrade dnsmasq-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade dhcp-develUpgrade bind9.16Upgrade dhcp-libs | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind9.16-docUpgrade bind-pkcs11-utilsUpgrade dhcp-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-docUpgrade bind-export-libsUpgrade bind-export-develUpgrade dnsmasqUpgrade bind-utils-debuginfoUpgrade bind-libs-liteUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-sdb-debuginfoUpgrade unbound-libsUpgrade bind-licenseUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind-libs-debuginfoUpgrade dhcp-relayUpgrade bind-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade bind9.16-libsUpgrade dhcp-relay-debuginfoUpgrade dhcp-develUpgrade bind9.16-licenseUpgrade unboundUpgrade dhcp-clientUpgrade unbound-debugsourceUpgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade bind-develUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade dhcp-client-debuginfoUpgrade bind-debuginfoUpgrade dhcp-server-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-pkcs11Upgrade bind-export-libs-debuginfoUpgrade dhcp-commonUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libsUpgrade unbound-libs-debuginfoUpgrade dhclientUpgrade dhcp-libsUpgrade dhcp-debuginfoUpgrade dhcpUpgrade bind9.16-utils-debuginfoUpgrade bind-dnssec-docUpgrade unbound-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind9.16-debuginfoUpgrade python3-bind9.16Upgrade unbound-pythonUpgrade bind9.16-chrootUpgrade bind9.16-develUpgrade bind-dyndb-ldapUpgrade dhcp-serverUpgrade python3-unboundUpgrade python3-bindUpgrade dnsmasq-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade unbound-develUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfo | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade dnsmasq-debuginfoUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-export-develUpgrade bind-sdb-chrootUpgrade dhcp-relay-debuginfoUpgrade bind9.16-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-serverUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-libsUpgrade dhcp-server-debuginfoUpgrade dhcp-libs-debuginfoUpgrade bind-utilsUpgrade bind-dnssec-utilsUpgrade dhcp-libsUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade dhcp-clientUpgrade bind-export-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind9.16-libsUpgrade bind9.16Upgrade dhcp-relayUpgrade dnsmasq-utils-debuginfoUpgrade bind-develUpgrade bind-export-libsUpgrade dnsmasq-utilsUpgrade bind-libs-debuginfoUpgrade bind-pkcs11Upgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dyndb-ldapUpgrade dhcp-debugsourceUpgrade bind9.16-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-develUpgrade bind-sdbUpgrade dhcp-client-debuginfoUpgrade bind9.16-debugsourceUpgrade bindUpgrade dnsmasq-debugsourceUpgrade bind9.16-utils-debuginfoUpgrade bind-chrootUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-libs-lite-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-lite-develUpgrade bind9.16-chrootUpgrade bind-utils-debuginfoUpgrade dhcp-debuginfoUpgrade bind-pkcs11-develUpgrade dnsmasq | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libdns1605Upgrade libns1604Upgrade libunbound8Upgrade libisc1606Upgrade libbind9-1600Upgrade pdns-recursorUpgrade libuv1Upgrade libirs1601Upgrade bind-docUpgrade unbound-pythonUpgrade libuv-develUpgrade unbound-muninUpgrade libdns1110Upgrade libisccfg163Upgrade libisccc161Upgrade libirs-develUpgrade bind-utilsUpgrade python-bindUpgrade libbind9-161Upgrade libisc1107Upgrade python3-bindUpgrade libisc1107-32bitUpgrade liblwres161Upgrade bind-chrootenvUpgrade bindUpgrade unboundUpgrade libisccc1600Upgrade libirs161Upgrade libisccfg1600Upgrade unbound-develUpgrade unbound-anchorUpgrade bind-devel | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade dnsmasq-baseUpgrade bind9Upgrade dnsmasq-base (Ubuntu Pro)Upgrade unboundUpgrade bind9 (Ubuntu Pro)Upgrade libunbound8 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub