Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16-chrootUpgrade dnsmasq-utilsUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind9.16-develUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind9.16Upgrade unbound-develUpgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utilsUpgrade bindUpgrade bind-dnssec-docUpgrade bind-develUpgrade bind-utilsUpgrade unboundUpgrade bind-pkcs11-develUpgrade unbound-libsUpgrade bind-dyndb-ldapUpgrade python3-bind9.16Upgrade bind-licenseUpgrade bind9.16-utilsUpgrade python3-unboundUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind9.16-libsUpgrade bind-export-develUpgrade dnsmasqUpgrade bind9.16-licenseUpgrade bind-docUpgrade bind9.16-docUpgrade bind-pkcs11-libs | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade pdns-recursorUpgrade unboundUpgrade knot-resolverUpgrade bindUpgrade dnsmasq | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python2-unboundUpgrade bind-libs-liteUpgrade bindUpgrade bind-debuginfoUpgrade bind-develUpgrade dnsmasq-debuginfoUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade unbound-debuginfoUpgrade bind-libsUpgrade dnsmasqUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade unboundUpgrade unbound-libsUpgrade unbound-utilsUpgrade bind-pkcs11-develUpgrade dnsmasq-utilsUpgrade bind-utilsUpgrade bind-export-libsUpgrade unbound-develUpgrade unbound-anchor | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade dnsmasqUpgrade bind-docUpgrade dnsmasq-utilsUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-debuginfoUpgrade unbound-debugsourceUpgrade bind-dlz-sqlite3-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-sqlite3Upgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade unbound-utils-debuginfoUpgrade bind-pkcs11Upgrade bind-dnssec-docUpgrade unbound-anchor-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade unbound-utilsUpgrade bind-utilsUpgrade bind-utils-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade python3-unboundUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-libsUpgrade unbound-anchorUpgrade dnsmasq-debugsourceUpgrade bind-pkcs11-develUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-develUpgrade unboundUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dnssec-utilsUpgrade unbound-debuginfoUpgrade bindUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade bind-debugsourceUpgrade unbound-develUpgrade bind-licenseUpgrade python3-bindUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-libs-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-export-libsUpgrade bind-sdbUpgrade bind-dyndb-ldapUpgrade bindUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade dhclientUpgrade bind-export-develUpgrade bind-chrootUpgrade dhcp-develUpgrade bind-libs-liteUpgrade dhcp-commonUpgrade dhcp-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-develUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade dhcp-libsUpgrade dhcpUpgrade bind-pkcs11-utils | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade systemdUpgrade pdns-recursorUpgrade bind9Upgrade dnsmasqUpgrade unboundUpgrade knot-resolverUpgrade dnsjava | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade bind918Upgrade dnsmasqUpgrade bind916Upgrade unboundUpgrade dnsmasq-develUpgrade powerdns-recursorUpgrade bind9-develUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemdUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-libs | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-containerUpgrade systemd-udevUpgrade systemd-timesyncdUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-pamUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-udev-compatUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-udev | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade python3-unboundUpgrade unboundUpgrade python2-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade dnsmasqUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade bind-dyndb-ldapUpgrade bind-utilsUpgrade bind-chrootUpgrade dhcp-clientUpgrade bind-sdbUpgrade bind-libsUpgrade python3-bind9.16Upgrade bindUpgrade bind-docUpgrade bind-pkcs11Upgrade unbound-develUpgrade bind-dnssec-docUpgrade bind-pkcs11-libsUpgrade dhcp-serverUpgrade unbound-libsUpgrade bind-lite-develUpgrade dnsmasq-utilsUpgrade bind-libs-liteUpgrade unboundUpgrade python3-bindUpgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade dhcp-develUpgrade dhcpUpgrade bind9.16Upgrade dhcp-commonUpgrade dhcp-libsUpgrade python3-unboundUpgrade bind-pkcs11-develUpgrade dhclientUpgrade dhcp-relayUpgrade bind9.16-licenseUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade bind-licenseUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade unbound-pythonUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-sdb-chrootUpgrade bind9.16-chroot | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-debuginfoUpgrade bind-libsUpgrade unbound-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdbUpgrade unbound-debugsourceUpgrade bind-utils-debuginfoUpgrade bind9.16-develUpgrade dhcp-commonUpgrade python3-unboundUpgrade python3-bind9.16Upgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade dhcp-client-debuginfoUpgrade dnsmasqUpgrade dhcp-serverUpgrade bind-pkcs11-debuginfoUpgrade dhclientUpgrade bind-lite-develUpgrade bind-docUpgrade dhcp-debuginfoUpgrade bind9.16Upgrade bind9.16-utils-debuginfoUpgrade dhcp-libsUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dyndb-ldapUpgrade bind-chrootUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-chrootUpgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade bind9.16-utilsUpgrade dhcp-server-debuginfoUpgrade python3-unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11Upgrade unbound-libs-debuginfoUpgrade bind-dnssec-docUpgrade bind9.16-debugsourceUpgrade dhcp-debugsourceUpgrade bind-licenseUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-clientUpgrade dhcpUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-debuginfoUpgrade bindUpgrade dhcp-develUpgrade bind9.16-licenseUpgrade bind-debugsourceUpgrade python3-bindUpgrade unbound-debuginfoUpgrade unbound-pythonUpgrade dhcp-relayUpgrade bind-sdb-chrootUpgrade bind-libs-debuginfoUpgrade bind-export-develUpgrade bind-dnssec-utilsUpgrade bind-libs-liteUpgrade bind9.16-dnssec-utilsUpgrade dnsmasq-debugsourceUpgrade bind-export-libs-debuginfoUpgrade unbound-libsUpgrade bind9.16-docUpgrade dhcp-libs-debuginfoUpgrade unboundUpgrade bind9.16-libsUpgrade bind-sdb-debuginfoUpgrade bind-develUpgrade dhcp-relay-debuginfo | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade dhcp-debugsourceUpgrade dnsmasq-utilsUpgrade dhcp-server-debuginfoUpgrade bind-chrootUpgrade bind-utils-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-sdbUpgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-chrootUpgrade bind-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bindUpgrade bind-libsUpgrade bind-export-develUpgrade bind9.16-dnssec-utilsUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-develUpgrade dnsmasq-debugsourceUpgrade bind-export-libsUpgrade bind-export-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade dnsmasq-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-pkcs11-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade dhcp-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-develUpgrade bind-pkcs11-utils-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-develUpgrade dnsmasqUpgrade dhcp-clientUpgrade bind-utilsUpgrade dhcp-client-debuginfoUpgrade dhcp-serverUpgrade bind9.16-debuginfoUpgrade bind9.16-libsUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libsUpgrade dhcp-relay-debuginfoUpgrade dhcp-relayUpgrade bind-dnssec-utils-debuginfo | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libdns1110Upgrade libisc1606Upgrade python-bindUpgrade unboundUpgrade bindUpgrade pdns-recursorUpgrade libisccc161Upgrade libisc1107-32bitUpgrade bind-utilsUpgrade bind-docUpgrade unbound-muninUpgrade unbound-anchorUpgrade unbound-develUpgrade libirs161Upgrade libbind9-1600Upgrade libirs-develUpgrade libuv1Upgrade libirs1601Upgrade liblwres161Upgrade python3-bindUpgrade libisccfg163Upgrade libisc1107Upgrade bind-chrootenvUpgrade unbound-pythonUpgrade libisccfg1600Upgrade libbind9-161Upgrade bind-develUpgrade libunbound8Upgrade libuv-develUpgrade libns1604Upgrade libdns1605Upgrade libisccc1600 | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade unboundUpgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9Upgrade dnsmasq-base | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub