Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-sdb-chrootUpgrade unbound-develUpgrade bind9.16-develUpgrade bind-pkcs11Upgrade python3-bindUpgrade bind9.16-dnssec-utilsUpgrade bind-chrootUpgrade bind9.16-chrootUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-libsUpgrade bindUpgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind-lite-develUpgrade bind9.16-licenseUpgrade unboundUpgrade python3-unboundUpgrade bind9.16-utilsUpgrade bind-sdbUpgrade bind-dyndb-ldapUpgrade bind-docUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade python3-bind9.16Upgrade bind-export-develUpgrade bind-pkcs11-develUpgrade dnsmasqUpgrade bind9.16-docUpgrade bind9.16-libsUpgrade unbound-libs | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade bindUpgrade dnsmasqUpgrade knot-resolverUpgrade pdns-recursorUpgrade unbound | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-debuginfoUpgrade bind-licenseUpgrade bind-libs-liteUpgrade dnsmasq-debuginfoUpgrade python2-unboundUpgrade bind-develUpgrade bind-libsUpgrade bind-sdbUpgrade bindUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade unbound-debuginfoUpgrade dnsmasq-utilsUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade python3-unboundUpgrade bind-chrootUpgrade unbound-utilsUpgrade unbound-libsUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade unboundUpgrade unbound-anchorUpgrade bind-pkcs11-develUpgrade unbound-develUpgrade bind-lite-develUpgrade dnsmasq | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-dlz-mysql-debuginfoUpgrade dnsmasq-debugsourceUpgrade python3-bindUpgrade bind-pkcs11-develUpgrade bind-dlz-ldap-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade unbound-anchorUpgrade unbound-debuginfoUpgrade bind-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bindUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-develUpgrade unbound-develUpgrade unboundUpgrade bind-libs-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11Upgrade python3-unbound-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind-debuginfoUpgrade bind-docUpgrade dnsmasqUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dlz-ldapUpgrade unbound-anchor-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dlz-sqlite3Upgrade bind-dnssec-utils-debuginfoUpgrade unbound-utils-debuginfoUpgrade unbound-utilsUpgrade unbound-libs-debuginfoUpgrade python3-unboundUpgrade bind-utilsUpgrade bind-dlz-filesystemUpgrade bind-dlz-sqlite3-debuginfoUpgrade dnsmasq-utilsUpgrade bind-dnssec-docUpgrade unbound-debugsourceUpgrade bind-pkcs11-libs-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade dhcp-commonUpgrade dhcp-debuginfoUpgrade bind-libsUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade dhclientUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-licenseUpgrade bindUpgrade dhcp-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade dhcpUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind-pkcs11-develUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-sdb-chroot | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade dnsmasqUpgrade unboundUpgrade pdns-recursorUpgrade systemdUpgrade bind9Upgrade knot-resolverUpgrade dnsjava | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade dnsmasqUpgrade bind916Upgrade unboundUpgrade dnsmasq-develUpgrade bind918Upgrade powerdns-recursorUpgrade FreeBSDUpgrade bind9-devel | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-pamUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-libsUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-resolved | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-timesyncdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-udevUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemdUpgrade systemd-timesyncdUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-libs | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade unboundUpgrade python3-unboundUpgrade python2-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind9.16Upgrade python3-bindUpgrade bind-licenseUpgrade bind-export-libsUpgrade unbound-pythonUpgrade bind9.16-licenseUpgrade dhcp-develUpgrade bind9.16-chrootUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade dnsmasqUpgrade bind-docUpgrade bind-pkcs11Upgrade dnsmasq-utilsUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-dyndb-ldapUpgrade bind9.16-develUpgrade python3-bind9.16Upgrade dhcp-clientUpgrade bind-dnssec-docUpgrade dhcp-serverUpgrade bindUpgrade unbound-libsUpgrade unbound-develUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade dhcp-commonUpgrade unboundUpgrade dhcpUpgrade dhcp-libsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade bind-export-develUpgrade dhcp-relayUpgrade bind-develUpgrade dhclientUpgrade bind-dnssec-utilsUpgrade python3-unboundUpgrade bind-sdb-chroot | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade dhcp-libsUpgrade bind9.16-debugsourceUpgrade bind9.16-utils-debuginfoUpgrade bind-libsUpgrade dhclientUpgrade bind-pkcs11-libsUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-chrootUpgrade bind-dyndb-ldapUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11Upgrade unbound-debugsourceUpgrade bind9.16-develUpgrade bind-pkcs11-libs-debuginfoUpgrade dnsmasq-utilsUpgrade bind-dnssec-docUpgrade unbound-libs-debuginfoUpgrade bind-sdbUpgrade bind9.16-utilsUpgrade bind9.16-chrootUpgrade dnsmasq-debuginfoUpgrade bind-utils-debuginfoUpgrade dhcp-debuginfoUpgrade bind9.16Upgrade unbound-develUpgrade bind-debuginfoUpgrade python3-unboundUpgrade dhcp-serverUpgrade python3-bind9.16Upgrade bind-utilsUpgrade bind-docUpgrade dhcp-server-debuginfoUpgrade dnsmasqUpgrade dhcp-client-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade dhcp-commonUpgrade bind-libs-liteUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind-dyndb-ldap-debugsourceUpgrade unbound-debuginfoUpgrade unbound-pythonUpgrade bind-sdb-chrootUpgrade bind-dnssec-utilsUpgrade bind-export-develUpgrade dhcp-relayUpgrade bind-libs-debuginfoUpgrade unboundUpgrade python3-bindUpgrade bind-export-libs-debuginfoUpgrade bind-debugsourceUpgrade dhcp-develUpgrade bind9.16-licenseUpgrade bind9.16-libsUpgrade dhcpUpgrade dhcp-relay-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcp-debugsourceUpgrade bind-sdb-debuginfoUpgrade bind-licenseUpgrade bind-develUpgrade bindUpgrade dhcp-clientUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade unbound-libsUpgrade bind9.16-debuginfoUpgrade bind9.16-docUpgrade bind-pkcs11-devel | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind-sdb-chrootUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade dnsmasqUpgrade bind-lite-develUpgrade bind9.16-debugsourceUpgrade bind9.16-utilsUpgrade bind9.16-develUpgrade bind-utilsUpgrade dhcp-clientUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-develUpgrade dnsmasq-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind9.16-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcp-relayUpgrade dhcp-relay-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-libsUpgrade dhcp-serverUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-debugsourceUpgrade bind-sdbUpgrade bind-develUpgrade bind9.16-utils-debuginfoUpgrade dhcp-server-debuginfoUpgrade bind-pkcs11Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-chrootUpgrade bind9.16Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade dnsmasq-debuginfoUpgrade bind-export-libsUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade dnsmasq-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-debugsourceUpgrade dnsmasq-debugsourceUpgrade dhcp-libsUpgrade dhcp-debuginfoUpgrade bind-libsUpgrade bind-export-develUpgrade bind9.16-dnssec-utilsUpgrade bind-utils-debuginfoUpgrade bind-chroot | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libirs161Upgrade python-bindUpgrade libdns1110Upgrade unbound-anchorUpgrade libisc1606Upgrade libisc1107-32bitUpgrade libirs-develUpgrade libbind9-1600Upgrade unbound-develUpgrade libisccc161Upgrade bind-docUpgrade pdns-recursorUpgrade bindUpgrade bind-utilsUpgrade unbound-muninUpgrade unboundUpgrade liblwres161Upgrade libbind9-161Upgrade libuv1Upgrade libunbound8Upgrade unbound-pythonUpgrade bind-chrootenvUpgrade libisccfg1600Upgrade libirs1601Upgrade bind-develUpgrade libdns1605Upgrade libns1604Upgrade libuv-develUpgrade libisccc1600Upgrade libisc1107Upgrade libisccfg163Upgrade python3-bind | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-base (Ubuntu Pro)Upgrade unboundUpgrade bind9Upgrade dnsmasq-base | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub