Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-licenseUpgrade unbound-libsUpgrade unboundUpgrade bind9.16-docUpgrade bind-docUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-develUpgrade bind-sdbUpgrade python3-bind9.16Upgrade bind-export-develUpgrade bind-export-libsUpgrade bind9.16-libsUpgrade python3-unboundUpgrade bind-pkcs11-libsUpgrade bind9.16-utilsUpgrade bind9.16-licenseUpgrade dnsmasqUpgrade unbound-develUpgrade bind-dnssec-docUpgrade bindUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-dnssec-utilsUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind9.16Upgrade bind9.16-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-develUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-chrootUpgrade bind9.16-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade pdns-recursorUpgrade unboundUpgrade dnsmasqUpgrade knot-resolverUpgrade bind | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdbUpgrade dnsmasq-debuginfoUpgrade unbound-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-develUpgrade python2-unboundUpgrade bind-libs-liteUpgrade bindUpgrade bind-debuginfoUpgrade bind-libsUpgrade bind-export-develUpgrade bind-chrootUpgrade unboundUpgrade bind-pkcs11-develUpgrade unbound-utilsUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade dnsmasq-utilsUpgrade bind-export-libsUpgrade unbound-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade dnsmasqUpgrade unbound-develUpgrade unbound-anchor | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-docUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dlz-ldapUpgrade python3-unbound-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-debuginfoUpgrade bind-docUpgrade dnsmasqUpgrade bind-debuginfoUpgrade dnsmasq-utilsUpgrade python3-unboundUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-utilsUpgrade unbound-libs-debuginfoUpgrade unbound-anchor-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade unbound-utilsUpgrade dnsmasq-debuginfoUpgrade unbound-debugsourceUpgrade bind-libsUpgrade unbound-utils-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-dlz-sqlite3Upgrade unbound-libsUpgrade unbound-anchorUpgrade dnsmasq-debugsourceUpgrade unbound-develUpgrade bind-debugsourceUpgrade bind-dlz-filesystem-debuginfoUpgrade unbound-debuginfoUpgrade bind-develUpgrade python3-bindUpgrade bind-dlz-mysqlUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade unboundUpgrade bind-dnssec-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-license | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-lite-develUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcpUpgrade dhclientUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind-export-develUpgrade bindUpgrade bind-dyndb-ldap | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade dnsjavaUpgrade knot-resolverUpgrade pdns-recursorUpgrade dnsmasqUpgrade unboundUpgrade bind9Upgrade systemd | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade dnsmasqUpgrade dnsmasq-develUpgrade unboundUpgrade bind916Upgrade bind918Upgrade bind9-develUpgrade powerdns-recursorUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-udev-compatUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemdUpgrade systemd-udev | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-udev-compatUpgrade systemd | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-udev-compat | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-unboundUpgrade unboundUpgrade python3-unboundUpgrade unbound-libs | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-udevUpgrade systemdUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind9.16-dnssec-utilsUpgrade unbound-pythonUpgrade bind-export-libsUpgrade dhcp-relayUpgrade bind-export-develUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade dhclientUpgrade dhcp-commonUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind9.16-docUpgrade unboundUpgrade dhcp-develUpgrade bind9.16Upgrade dhcpUpgrade dhcp-libsUpgrade python3-bindUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-dnssec-docUpgrade bind-pkcs11Upgrade bind-docUpgrade bindUpgrade python3-bind9.16Upgrade bind-sdbUpgrade unbound-libsUpgrade unbound-develUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade dnsmasq-utilsUpgrade dnsmasqUpgrade dhcp-serverUpgrade bind-pkcs11-libsUpgrade bind-dyndb-ldapUpgrade bind-utilsUpgrade dhcp-clientUpgrade bind-chrootUpgrade bind9.16-devel | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-dnssec-docUpgrade bind-pkcs11-libsUpgrade python3-unbound-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade dhcp-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind9.16Upgrade bind-debuginfoUpgrade bind9.16-utilsUpgrade bind-dyndb-ldapUpgrade bind9.16-utils-debuginfoUpgrade dhcp-libsUpgrade bind-libsUpgrade bind9.16-develUpgrade unbound-debugsourceUpgrade bind-sdbUpgrade bind9.16-debugsourceUpgrade bind-lite-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11Upgrade dhcp-serverUpgrade python3-bind9.16Upgrade dnsmasqUpgrade bind-pkcs11-debuginfoUpgrade dnsmasq-utilsUpgrade bind-libs-lite-debuginfoUpgrade python3-unboundUpgrade dhcp-commonUpgrade dhcp-server-debuginfoUpgrade bind-utilsUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade dhclientUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade dhcp-client-debuginfoUpgrade unbound-develUpgrade bind-pkcs11-libs-debuginfoUpgrade unbound-pythonUpgrade bind-licenseUpgrade unbound-debuginfoUpgrade python3-bindUpgrade dhcp-relayUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade unbound-libsUpgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade dhcpUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-export-libsUpgrade unboundUpgrade bind-pkcs11-utilsUpgrade bind9.16-debuginfoUpgrade dnsmasq-debugsourceUpgrade dhcp-develUpgrade bind9.16-licenseUpgrade bind-sdb-debuginfoUpgrade bindUpgrade bind-debugsourceUpgrade bind-develUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-debugsourceUpgrade dhcp-relay-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcp-clientUpgrade bind-export-libs-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade bind-export-devel | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-pkcs11-debuginfoUpgrade dhcp-relay-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-libs-debuginfoUpgrade dhcp-serverUpgrade bind9.16-debugsourceUpgrade bind9.16-debuginfoUpgrade bind9.16-libsUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-relayUpgrade bind-lite-develUpgrade dnsmasqUpgrade bind9.16-develUpgrade dhcp-client-debuginfoUpgrade bind9.16-utilsUpgrade bind-utilsUpgrade dhcp-clientUpgrade bind9.16Upgrade dnsmasq-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-export-libsUpgrade dnsmasq-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade bind-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-debuginfoUpgrade dhcp-debugsourceUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade dnsmasq-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade dhcp-server-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade bind-export-develUpgrade dhcp-libsUpgrade dhcp-debuginfo | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libisc1107Upgrade libisccc1600Upgrade python3-bindUpgrade libuv-develUpgrade libisccfg1600Upgrade libirs1601Upgrade libisccfg163Upgrade libdns1605Upgrade bind-develUpgrade libunbound8Upgrade unbound-pythonUpgrade liblwres161Upgrade libuv1Upgrade libns1604Upgrade libbind9-161Upgrade bind-chrootenvUpgrade libirs-develUpgrade libisc1606Upgrade unbound-muninUpgrade libdns1110Upgrade python-bindUpgrade pdns-recursorUpgrade libisc1107-32bitUpgrade unbound-anchorUpgrade libbind9-1600Upgrade libisccc161Upgrade unbound-develUpgrade libirs161Upgrade bind-utilsUpgrade unboundUpgrade bindUpgrade bind-doc | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-base (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade bind9Upgrade unbound | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub