Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-pkcs11-libsUpgrade bind9.16-docUpgrade bind-sdbUpgrade unbound-libsUpgrade bind-dyndb-ldapUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind-docUpgrade python3-unboundUpgrade bind9.16-utilsUpgrade dnsmasqUpgrade bind9.16-libsUpgrade unboundUpgrade bind-export-develUpgrade bind-export-libsUpgrade python3-bind9.16Upgrade bind-licenseUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade unbound-develUpgrade bind9.16-dnssec-utilsUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind9.16-develUpgrade bindUpgrade python3-bindUpgrade bind-sdb-chrootUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade dnsmasq-utilsUpgrade bind-utilsUpgrade bind-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade dnsmasqUpgrade bindUpgrade knot-resolverUpgrade unboundUpgrade pdns-recursor | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-develUpgrade unbound-debuginfoUpgrade bindUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade python2-unboundUpgrade bind-libsUpgrade bind-licenseUpgrade bind-export-develUpgrade dnsmasq-debuginfoUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade dnsmasqUpgrade bind-chrootUpgrade unbound-libsUpgrade unbound-develUpgrade bind-export-libsUpgrade unboundUpgrade unbound-utilsUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-pkcs11-develUpgrade unbound-anchor | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-unbound-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-chrootUpgrade bind-utilsUpgrade python3-unboundUpgrade bind-dlz-ldapUpgrade dnsmasq-debuginfoUpgrade unbound-anchor-debuginfoUpgrade bind-libsUpgrade bind-dlz-filesystemUpgrade bind-pkcs11Upgrade unbound-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade dnsmasq-utilsUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-docUpgrade unbound-debugsourceUpgrade bind-debuginfoUpgrade bind-docUpgrade dnsmasqUpgrade unbound-utilsUpgrade bind-utils-debuginfoUpgrade unbound-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade unboundUpgrade bind-debugsourceUpgrade unbound-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade unbound-anchorUpgrade dnsmasq-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade python3-bindUpgrade bind-dlz-filesystem-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-dlz-mysqlUpgrade unbound-debuginfoUpgrade bindUpgrade unbound-develUpgrade bind-license | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade dhcp-commonUpgrade dhcp-develUpgrade bind-pkcs11-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade dhcp-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-utilsUpgrade bind-lite-develUpgrade dhcpUpgrade bind-export-develUpgrade dhclientUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-sdbUpgrade bindUpgrade bind-pkcs11Upgrade bind-export-libs | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade systemdUpgrade bind9Upgrade dnsmasqUpgrade pdns-recursorUpgrade unboundUpgrade dnsjavaUpgrade knot-resolver | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade bind916Upgrade dnsmasq-develUpgrade unboundUpgrade dnsmasqUpgrade bind918Upgrade powerdns-recursorUpgrade bind9-develUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemdUpgrade systemd-networkdUpgrade systemd-containerUpgrade systemd-pam | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-udev | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade python3-unboundUpgrade python2-unboundUpgrade unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade dhcp-relayUpgrade bind9.16Upgrade python3-bindUpgrade unboundUpgrade unbound-pythonUpgrade bind9.16-docUpgrade bind-export-libsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-licenseUpgrade bind9.16-libsUpgrade dhcp-commonUpgrade bind9.16-chrootUpgrade bind9.16-utilsUpgrade bind-export-develUpgrade dhcpUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade dhclientUpgrade dhcp-develUpgrade dhcp-libsUpgrade bind-utilsUpgrade bind-dyndb-ldapUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade dnsmasq-utilsUpgrade bind-libsUpgrade dnsmasqUpgrade dhcp-serverUpgrade bind-pkcs11-libsUpgrade dhcp-clientUpgrade bind-chrootUpgrade bind-sdbUpgrade unbound-develUpgrade python3-bind9.16Upgrade unbound-libsUpgrade bind-dnssec-docUpgrade bindUpgrade bind-pkcs11Upgrade bind-docUpgrade bind9.16-develUpgrade bind-pkcs11-utils | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-chrootUpgrade dnsmasq-utilsUpgrade bind-dyndb-ldap-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade dhclientUpgrade bind-utilsUpgrade dhcp-client-debuginfoUpgrade dnsmasqUpgrade python3-bind9.16Upgrade python3-unboundUpgrade dhcp-commonUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-libsUpgrade unbound-libs-debuginfoUpgrade bind-dnssec-docUpgrade dhcp-debuginfoUpgrade bind9.16-utilsUpgrade bind-utils-debuginfoUpgrade bind-docUpgrade dhcp-server-debuginfoUpgrade bind9.16-debugsourceUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind9.16-dnssec-utils-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade unbound-debugsourceUpgrade bind9.16-chrootUpgrade dhcp-serverUpgrade bind9.16-libs-debuginfoUpgrade bind-debuginfoUpgrade bind-libsUpgrade dhcp-libsUpgrade bind9.16-develUpgrade bind9.16-utils-debuginfoUpgrade bind-sdbUpgrade unbound-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-sdb-debuginfoUpgrade bind-export-develUpgrade unbound-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade dhcp-debugsourceUpgrade bind-libs-liteUpgrade bind-libs-debuginfoUpgrade unbound-libsUpgrade bind9.16-libsUpgrade bindUpgrade dhcpUpgrade bind9.16-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-sdb-chrootUpgrade dhcp-relayUpgrade unbound-pythonUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade dhcp-libs-debuginfoUpgrade python3-bindUpgrade bind9.16-docUpgrade dhcp-relay-debuginfoUpgrade unboundUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-clientUpgrade bind-licenseUpgrade bind-develUpgrade bind9.16-licenseUpgrade bind-debugsourceUpgrade dhcp-develUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utils | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind9.16-develUpgrade bind9.16-utilsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-sdb-chrootUpgrade bind-libs-debuginfoUpgrade dhcp-serverUpgrade bind9.16-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade dnsmasq-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade bind-utilsUpgrade dhcp-clientUpgrade dnsmasqUpgrade dhcp-client-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-libsUpgrade dhcp-relayUpgrade dhcp-relay-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libsUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade dhcp-debugsourceUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-debuginfoUpgrade dnsmasq-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind-export-libs-debuginfoUpgrade dhcp-debuginfoUpgrade bind-export-develUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade dhcp-libsUpgrade bind-libsUpgrade dnsmasq-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-sdb-debuginfoUpgrade dhcp-server-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-libs-lite | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libunbound8Upgrade libuv1Upgrade python3-bindUpgrade bind-develUpgrade libisc1107Upgrade libisccfg163Upgrade libbind9-161Upgrade unbound-pythonUpgrade liblwres161Upgrade libisccc1600Upgrade libns1604Upgrade libuv-develUpgrade libdns1605Upgrade libirs1601Upgrade libisccfg1600Upgrade bind-chrootenvUpgrade libisccc161Upgrade libisc1107-32bitUpgrade unboundUpgrade bind-docUpgrade libirs-develUpgrade unbound-muninUpgrade python-bindUpgrade libbind9-1600Upgrade libdns1110Upgrade libirs161Upgrade bindUpgrade bind-utilsUpgrade pdns-recursorUpgrade libisc1606Upgrade unbound-develUpgrade unbound-anchor | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade dnsmasq-base (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade bind9 (Ubuntu Pro)Upgrade unboundUpgrade bind9Upgrade libunbound8 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub