The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-unboundUpgrade unbound-libsUpgrade bind-export-libsUpgrade bind-dnssec-utilsUpgrade dnsmasqUpgrade bindUpgrade bind-utilsUpgrade bind9.16-licenseUpgrade bind9.16-docUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind-export-develUpgrade dnsmasq-utilsUpgrade bind-docUpgrade bind-dnssec-docUpgrade bind-licenseUpgrade bind-dyndb-ldapUpgrade bind-sdbUpgrade python3-bind9.16Upgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-lite-develUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind9.16-utilsUpgrade bind-sdb-chrootUpgrade bind9.16-develUpgrade bind-chrootUpgrade unbound-develUpgrade unbound | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade bindUpgrade knot-resolverUpgrade dnsmasqUpgrade pdns-recursorUpgrade unbound | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bindUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade dnsmasqUpgrade bind-licenseUpgrade bind-pkcs11Upgrade unbound-anchorUpgrade unbound-libsUpgrade dnsmasq-utilsUpgrade unboundUpgrade bind-export-develUpgrade bind-debuginfoUpgrade unbound-debuginfoUpgrade bind-libs-liteUpgrade bind-utilsUpgrade python2-unboundUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade unbound-develUpgrade bind-lite-develUpgrade bind-chrootUpgrade unbound-utilsUpgrade python3-unbound | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade unbound-debugsourceUpgrade bind-chrootUpgrade bind-develUpgrade bind-dlz-mysqlUpgrade bind-dlz-sqlite3Upgrade bind-dlz-filesystemUpgrade python3-unboundUpgrade unboundUpgrade unbound-libsUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11-debuginfoUpgrade dnsmasqUpgrade dnsmasq-utilsUpgrade unbound-utilsUpgrade bind-debuginfoUpgrade unbound-libs-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade unbound-anchorUpgrade bind-dlz-filesystem-debuginfoUpgrade unbound-anchor-debuginfoUpgrade unbound-develUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-dlz-mysql-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dlz-ldapUpgrade bind-libsUpgrade bind-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bindUpgrade bind-pkcs11Upgrade bind-pkcs11-libs-debuginfoUpgrade unbound-debuginfoUpgrade unbound-utils-debuginfoUpgrade dnsmasq-debugsourceUpgrade bind-utils-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-debugsourceUpgrade python3-unbound-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-develUpgrade dhcp-commonUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-export-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade dhcpUpgrade bind-debuginfoUpgrade dhcp-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade dhclientUpgrade dhcp-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-licenseUpgrade bind-dyndb-ldap-debuginfoUpgrade bindUpgrade bind-sdbUpgrade dhcp-libsUpgrade bind-libs | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade unboundUpgrade knot-resolverUpgrade bind9Upgrade systemdUpgrade dnsmasqUpgrade pdns-recursorUpgrade dnsjava | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Feb 6, 2026 | Feb 6, 2026 |
| Freebsd | — | Upgrade bind916Upgrade dnsmasq-develUpgrade unboundUpgrade dnsmasqUpgrade bind918Upgrade powerdns-recursorUpgrade bind9-develUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-pamUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-networkd | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-unboundUpgrade unboundUpgrade unbound-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-libsUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-pamUpgrade systemdUpgrade systemd-udev-compat | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-unboundUpgrade unbound-libsUpgrade python3-unboundUpgrade unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-containerUpgrade systemd-udevUpgrade systemdUpgrade systemd-libsUpgrade systemd-udev-compat | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-06 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5039227)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5039227)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5039236)2024-06 Cumulative Update for Microsoft Windows Server 2012 (KB5039260)2024-06 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5039214)2024-06 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5039294)2024-06 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5039217) | Jun 11, 2024 | Jun 11, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade dhcp-serverUpgrade bind9.16Upgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade bind-utilsUpgrade bind-libs-liteUpgrade dhclientUpgrade dhcpUpgrade dhcp-develUpgrade dhcp-libsUpgrade bind-develUpgrade dhcp-commonUpgrade bind-sdb-chrootUpgrade bind9.16-licenseUpgrade dhcp-relayUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade unbound-pythonUpgrade dnsmasq-utilsUpgrade bind-pkcs11-libsUpgrade python3-unboundUpgrade bind9.16-develUpgrade bind-chrootUpgrade bind9.16-utilsUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade python3-bind9.16Upgrade bind-sdbUpgrade dnsmasqUpgrade dhcp-clientUpgrade bind-licenseUpgrade unbound-libsUpgrade bind9.16-libsUpgrade bind-export-develUpgrade bind-docUpgrade unboundUpgrade bind9.16-docUpgrade bindUpgrade bind-dyndb-ldapUpgrade unbound-develUpgrade bind-export-libs | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade dnsmasq-debuginfoUpgrade dhcp-debuginfoUpgrade bind-pkcs11-libsUpgrade dnsmasq-utils-debuginfoUpgrade dhcpUpgrade bind-dnssec-docUpgrade unbound-debuginfoUpgrade unbound-develUpgrade bind-pkcs11Upgrade dhcp-serverUpgrade bind-sdbUpgrade bind9.16-debugsourceUpgrade bind9.16-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-develUpgrade python3-bind9.16Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-lite-develUpgrade unbound-pythonUpgrade dhcp-libs-debuginfoUpgrade dhcp-commonUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-utilsUpgrade dnsmasq-utilsUpgrade bind-libs-lite-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-libsUpgrade bind9.16-utils-debuginfoUpgrade dhcp-server-debuginfoUpgrade dhclientUpgrade bind-dyndb-ldapUpgrade dhcp-libsUpgrade unbound-libs-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16Upgrade python3-bindUpgrade dhcp-client-debuginfoUpgrade python3-unboundUpgrade bind9.16-libs-debuginfoUpgrade bind-develUpgrade bind9.16-debuginfoUpgrade unbound-debugsourceUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bind9.16-libsUpgrade dhcp-develUpgrade bind-pkcs11-utilsUpgrade bind9.16-licenseUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade dhcp-relay-debuginfoUpgrade bind9.16-docUpgrade dhcp-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade dhcp-relayUpgrade dnsmasq-debugsourceUpgrade bind-utils-debuginfoUpgrade unboundUpgrade bind-export-libsUpgrade dnsmasqUpgrade bind-docUpgrade dhcp-clientUpgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bindUpgrade bind-libs-liteUpgrade unbound-libsUpgrade bind-sdb-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11-devel | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade dhcp-libs-debuginfoUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utilsUpgrade dhcp-serverUpgrade bind9.16-debuginfoUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-relay-debuginfoUpgrade bind-export-libsUpgrade bind-export-libs-debuginfoUpgrade dhcp-relayUpgrade bind-sdb-debuginfoUpgrade bind9.16-libsUpgrade dnsmasq-utils-debuginfoUpgrade bind-develUpgrade dhcp-clientUpgrade dnsmasq-debuginfoUpgrade bind-libs-liteUpgrade dhcp-server-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind9.16Upgrade dnsmasq-utilsUpgrade bind-libs-debuginfoUpgrade bind-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade dnsmasqUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade bind9.16-utilsUpgrade dhcp-debugsourceUpgrade bind-pkcs11-debuginfoUpgrade bind-dyndb-ldapUpgrade bind9.16-utils-debuginfoUpgrade bind-lite-develUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade dnsmasq-debugsourceUpgrade bindUpgrade bind-debugsourceUpgrade bind9.16-develUpgrade bind-utils-debuginfoUpgrade bind-sdbUpgrade bind9.16-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade dhcp-debuginfo | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade unboundUpgrade bind-utilsUpgrade libbind9-161Upgrade libdns1110Upgrade unbound-anchorUpgrade unbound-develUpgrade libisccc161Upgrade libisccfg1600Upgrade bind-develUpgrade libirs-develUpgrade python-bindUpgrade libisccfg163Upgrade python3-bindUpgrade libisccc1600Upgrade libisc1107Upgrade libisc1107-32bitUpgrade liblwres161Upgrade bindUpgrade bind-chrootenvUpgrade libirs161Upgrade libuv-develUpgrade unbound-muninUpgrade unbound-pythonUpgrade libisc1606Upgrade libuv1Upgrade libdns1605Upgrade bind-docUpgrade pdns-recursorUpgrade libunbound8Upgrade libbind9-1600Upgrade libns1604Upgrade libirs1601 | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade unboundUpgrade dnsmasq-baseUpgrade bind9Upgrade dnsmasq-base (Ubuntu Pro)Upgrade libunbound8Upgrade bind9 (Ubuntu Pro) | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub