Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-dnssec-utilsUpgrade bind-pkcs11-utilsUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade bind9.16Upgrade bind9.16-develUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind9.16-dnssec-utilsUpgrade bind-libs-liteUpgrade dnsmasq-utilsUpgrade unbound-develUpgrade bind-lite-develUpgrade bind-dnssec-docUpgrade python3-bindUpgrade bind-develUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind9.16-libsUpgrade python3-unboundUpgrade bind-licenseUpgrade python3-bind9.16Upgrade bind-dyndb-ldapUpgrade bind-docUpgrade bind-sdbUpgrade unboundUpgrade bind-pkcs11-libsUpgrade bind9.16-docUpgrade bind9.16-utilsUpgrade dnsmasqUpgrade unbound-libsUpgrade bind9.16-licenseUpgrade bind-export-develUpgrade bind-pkcs11-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade pdns-recursorUpgrade unboundUpgrade bindUpgrade knot-resolverUpgrade dnsmasq | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-chrootUpgrade unboundUpgrade bind-lite-develUpgrade dnsmasqUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind-export-libsUpgrade unbound-libsUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-pkcs11-libsUpgrade unbound-utilsUpgrade bind-pkcs11-develUpgrade unbound-develUpgrade unbound-anchorUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade unbound-debuginfoUpgrade python2-unboundUpgrade bind-export-develUpgrade bind-develUpgrade bindUpgrade bind-libs-liteUpgrade dnsmasq-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-libs | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade unbound-utilsUpgrade bind-chrootUpgrade bind-dlz-ldapUpgrade bind-pkcs11Upgrade bind-pkcs11-libs-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-debuginfoUpgrade unbound-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-dlz-filesystemUpgrade unbound-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade unbound-anchor-debuginfoUpgrade bind-docUpgrade bind-pkcs11-libsUpgrade dnsmasqUpgrade python3-unboundUpgrade bind-debuginfoUpgrade unbound-debugsourceUpgrade dnsmasq-utilsUpgrade bind-dnssec-docUpgrade bind-dlz-sqlite3-debuginfoUpgrade unboundUpgrade unbound-debuginfoUpgrade bindUpgrade bind-libs-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-pkcs11-utilsUpgrade unbound-libsUpgrade bind-develUpgrade bind-licenseUpgrade dnsmasq-debugsourceUpgrade unbound-anchorUpgrade bind-pkcs11-develUpgrade bind-debugsourceUpgrade unbound-develUpgrade python3-bindUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dnssec-utils | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-sdbUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bindUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-export-libsUpgrade dhclientUpgrade bind-debuginfoUpgrade dhcp-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-chrootUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade dhcp-libsUpgrade dhcpUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-develUpgrade dhcp-common | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade knot-resolverUpgrade dnsjavaUpgrade dnsmasqUpgrade systemdUpgrade unboundUpgrade pdns-recursorUpgrade bind9 | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade bind9-develUpgrade FreeBSDUpgrade powerdns-recursorUpgrade dnsmasq-develUpgrade bind916Upgrade bind918Upgrade dnsmasqUpgrade unbound | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-udev-compatUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-containerUpgrade systemdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-pam | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-nspawnUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-networkd | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-containerUpgrade systemd-timesyncd | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unboundUpgrade unboundUpgrade unbound-libsUpgrade python2-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade python3-bindUpgrade unboundUpgrade dhcp-develUpgrade dhcp-libsUpgrade dhcpUpgrade bind9.16-docUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind-develUpgrade bind-licenseUpgrade unbound-pythonUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind9.16-dnssec-utilsUpgrade dhcp-relayUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade dhcp-commonUpgrade dhclientUpgrade bind9.16Upgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-docUpgrade bind-utilsUpgrade bind-dyndb-ldapUpgrade bind-dnssec-docUpgrade bindUpgrade bind-pkcs11Upgrade dnsmasqUpgrade dhcp-serverUpgrade bind-pkcs11-libsUpgrade dhcp-clientUpgrade bind-libsUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade unbound-libsUpgrade unbound-develUpgrade bind-sdbUpgrade python3-bind9.16Upgrade bind9.16-devel | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-dnssec-utils-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcpUpgrade bind-licenseUpgrade bind-export-libsUpgrade dnsmasq-debugsourceUpgrade unboundUpgrade bind9.16-libsUpgrade bind-export-libs-debuginfoUpgrade dhcp-relay-debuginfoUpgrade bind-develUpgrade dhcp-clientUpgrade bind-sdb-debuginfoUpgrade bind9.16-debuginfoUpgrade dhcp-debugsourceUpgrade bind9.16-licenseUpgrade bindUpgrade dhcp-develUpgrade bind9.16-docUpgrade bind-pkcs11-utilsUpgrade bind-dyndb-ldap-debugsourceUpgrade unbound-libsUpgrade bind-pkcs11-develUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-dnssec-utilsUpgrade bind-export-develUpgrade bind-libs-debuginfoUpgrade dhcp-relayUpgrade python3-bindUpgrade unbound-debuginfoUpgrade unbound-pythonUpgrade bind-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-utilsUpgrade dnsmasqUpgrade dnsmasq-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-chrootUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade dhcp-server-debuginfoUpgrade bind9.16-debugsourceUpgrade dhclientUpgrade dhcp-libsUpgrade bind-utils-debuginfoUpgrade bind-docUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-utilsUpgrade bind-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade dnsmasq-utilsUpgrade python3-bind9.16Upgrade bind-lite-develUpgrade bind-libsUpgrade bind-dyndb-ldapUpgrade dhcp-debuginfoUpgrade bind-dnssec-docUpgrade bind9.16Upgrade unbound-libs-debuginfoUpgrade unbound-develUpgrade bind9.16-develUpgrade bind-pkcs11-libs-debuginfoUpgrade unbound-debugsourceUpgrade bind-sdbUpgrade dhcp-commonUpgrade dhcp-serverUpgrade python3-unbound | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind9.16-debuginfoUpgrade bind-lite-develUpgrade dnsmasq-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-develUpgrade bind-utilsUpgrade dhcp-clientUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-sdb-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-serverUpgrade dnsmasqUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libsUpgrade dhcp-relayUpgrade dhcp-libs-debuginfoUpgrade dhcp-relay-debuginfoUpgrade bind9.16-utilsUpgrade bind-pkcs11-libsUpgrade bind9.16-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-develUpgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade dhcp-server-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade dnsmasq-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade dhcp-libsUpgrade dhcp-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade bind-export-develUpgrade dnsmasq-debugsourceUpgrade bind-export-libsUpgrade bind-dyndb-ldapUpgrade dnsmasq-utilsUpgrade bind-debugsourceUpgrade bind9.16Upgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade dhcp-debugsource | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libisccc1600Upgrade libbind9-161Upgrade libuv1Upgrade python3-bindUpgrade libisccfg163Upgrade libisc1107Upgrade libns1604Upgrade liblwres161Upgrade libunbound8Upgrade libuv-develUpgrade libdns1605Upgrade bind-develUpgrade bind-chrootenvUpgrade unbound-pythonUpgrade libirs1601Upgrade libisccfg1600Upgrade unbound-anchorUpgrade unbound-develUpgrade bindUpgrade unboundUpgrade pdns-recursorUpgrade bind-docUpgrade libbind9-1600Upgrade libisc1107-32bitUpgrade libdns1110Upgrade python-bindUpgrade bind-utilsUpgrade libisc1606Upgrade libisccc161Upgrade unbound-muninUpgrade libirs161Upgrade libirs-devel | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade bind9 (Ubuntu Pro)Upgrade unboundUpgrade dnsmasq-baseUpgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub