Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-bind9.16Upgrade bind-pkcs11-develUpgrade dnsmasqUpgrade bind9.16-docUpgrade bind-pkcs11-libsUpgrade bind-export-develUpgrade unboundUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-export-libsUpgrade unbound-libsUpgrade bind9.16-utilsUpgrade bind9.16-libsUpgrade python3-unboundUpgrade bind-docUpgrade bind-dyndb-ldapUpgrade bind9.16-licenseUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-lite-develUpgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind-libsUpgrade dnsmasq-utilsUpgrade bind9.16-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade unbound-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade dnsmasqUpgrade unboundUpgrade pdns-recursor | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-licenseUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade unbound-debuginfoUpgrade bindUpgrade bind-libsUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade unbound-develUpgrade bind-pkcs11-libsUpgrade unbound-utilsUpgrade unboundUpgrade python3-unboundUpgrade dnsmasqUpgrade bind-lite-develUpgrade dnsmasq-utilsUpgrade bind-utilsUpgrade unbound-anchorUpgrade unbound-libsUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade python2-unboundUpgrade dnsmasq-debuginfoUpgrade bind-libs-liteUpgrade bind-devel | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-develUpgrade bind-dlz-mysql-debuginfoUpgrade unboundUpgrade bind-libs-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade bind-dnssec-utilsUpgrade dnsmasq-debugsourceUpgrade unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bindUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-debugsourceUpgrade bind-licenseUpgrade python3-bindUpgrade unbound-anchorUpgrade bind-pkcs11-develUpgrade unbound-develUpgrade bind-dnssec-docUpgrade bind-dlz-ldapUpgrade bind-docUpgrade bind-pkcs11Upgrade bind-dlz-sqlite3Upgrade bind-dnssec-utils-debuginfoUpgrade unbound-utils-debuginfoUpgrade unbound-utilsUpgrade bind-pkcs11-libsUpgrade unbound-anchor-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade unbound-debugsourceUpgrade dnsmasq-utilsUpgrade python3-unboundUpgrade bind-utilsUpgrade bind-dlz-filesystemUpgrade unbound-libs-debuginfoUpgrade bind-debuginfoUpgrade dnsmasqUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-libsUpgrade dnsmasq-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-debuginfoUpgrade bind-dyndb-ldapUpgrade dhclientUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-export-libsUpgrade bind-sdbUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-develUpgrade bind-chrootUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade dhcpUpgrade bind-lite-develUpgrade dhcp-commonUpgrade dhcp-debuginfo | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade systemdUpgrade pdns-recursorUpgrade dnsmasqUpgrade bind9Upgrade unboundUpgrade dnsjavaUpgrade knot-resolver | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade bind918Upgrade dnsmasq-develUpgrade dnsmasqUpgrade unboundUpgrade bind916Upgrade FreeBSDUpgrade bind9-develUpgrade powerdns-recursor | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-resolved | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-nspawnUpgrade systemdUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-timesyncdUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-resolvedUpgrade systemd-libs | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-unboundUpgrade unboundUpgrade unbound-libsUpgrade python3-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind-export-libsUpgrade dhcp-develUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade bind9.16-libsUpgrade bind9.16Upgrade dhcpUpgrade dhcp-libsUpgrade unboundUpgrade python3-bindUpgrade bind-licenseUpgrade dhcp-commonUpgrade unbound-pythonUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade dhcp-relayUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade dhclientUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade dhcp-clientUpgrade python3-bind9.16Upgrade unbound-develUpgrade unbound-libsUpgrade bind-sdbUpgrade bind-docUpgrade bind-dnssec-docUpgrade bindUpgrade bind-libs-liteUpgrade dnsmasq-utilsUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade dnsmasqUpgrade dhcp-serverUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade bind-dyndb-ldapUpgrade bind-chroot | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-sdb-chrootUpgrade bind-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-develUpgrade dhcp-relayUpgrade bind-licenseUpgrade bind-develUpgrade dhcp-debugsourceUpgrade dhcp-relay-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-licenseUpgrade dhcp-develUpgrade bind-export-libsUpgrade bind9.16-debuginfoUpgrade bindUpgrade dhcpUpgrade bind-pkcs11-utilsUpgrade bind-export-libs-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade unbound-libsUpgrade bind-export-develUpgrade unbound-pythonUpgrade bind-dnssec-utils-debuginfoUpgrade unbound-debuginfoUpgrade bind9.16-docUpgrade dnsmasq-debugsourceUpgrade unboundUpgrade bind9.16-libsUpgrade dhcp-libs-debuginfoUpgrade python3-bindUpgrade dhcp-clientUpgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade python3-bind9.16Upgrade bind-utils-debuginfoUpgrade bind-docUpgrade bind9.16Upgrade bind-dnssec-docUpgrade bind9.16-utilsUpgrade unbound-libs-debuginfoUpgrade dhcp-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade dnsmasqUpgrade bind-libs-lite-debuginfoUpgrade python3-unboundUpgrade dhcp-commonUpgrade dhcp-client-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade dhcp-serverUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-libsUpgrade unbound-develUpgrade unbound-debugsourceUpgrade bind-sdbUpgrade bind9.16-develUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-lite-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-chrootUpgrade dhcp-libsUpgrade bind-libsUpgrade python3-unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade dnsmasq-utilsUpgrade bind9.16-debugsourceUpgrade dhcp-server-debuginfoUpgrade dhclient | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-pkcs11Upgrade dnsmasq-debugsourceUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind9.16-libs-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade dnsmasq-utilsUpgrade bind-chrootUpgrade bind-utils-debuginfoUpgrade bind-develUpgrade bind-debugsourceUpgrade bind-sdb-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bindUpgrade bind-libs-lite-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-libsUpgrade bind-sdbUpgrade bind9.16-chrootUpgrade bind-pkcs11-libs-debuginfoUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade bind9.16-dnssec-utilsUpgrade dhcp-server-debuginfoUpgrade dhcp-debugsourceUpgrade bind9.16Upgrade bind-pkcs11-utilsUpgrade bind-export-libs-debuginfoUpgrade bind-libs-liteUpgrade dnsmasqUpgrade dhcp-relayUpgrade bind-sdb-chrootUpgrade bind9.16-debugsourceUpgrade dhcp-clientUpgrade bind-utilsUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade dhcp-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind9.16-debuginfoUpgrade dhcp-serverUpgrade bind9.16-utilsUpgrade dhcp-client-debuginfoUpgrade bind9.16-develUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade dhcp-relay-debuginfoUpgrade bind9.16-libs | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libdns1110Upgrade python-bindUpgrade unbound-anchorUpgrade libisc1107-32bitUpgrade bind-utilsUpgrade pdns-recursorUpgrade bind-docUpgrade unbound-muninUpgrade libisccc161Upgrade libirs161Upgrade unbound-develUpgrade libirs-develUpgrade libisc1606Upgrade libbind9-1600Upgrade unboundUpgrade bindUpgrade libisccfg1600Upgrade libunbound8Upgrade libuv-develUpgrade libns1604Upgrade libdns1605Upgrade libisccfg163Upgrade libisc1107Upgrade libuv1Upgrade liblwres161Upgrade libisccc1600Upgrade libirs1601Upgrade libbind9-161Upgrade unbound-pythonUpgrade bind-chrootenvUpgrade bind-develUpgrade python3-bind | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade bind9Upgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade unboundUpgrade libunbound8 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub