Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade unbound-develUpgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-libsUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind-dyndb-ldapUpgrade python3-unboundUpgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-export-develUpgrade python3-bind9.16Upgrade bind-licenseUpgrade bind-docUpgrade bind-sdbUpgrade bind9.16-licenseUpgrade unbound-libsUpgrade unboundUpgrade dnsmasqUpgrade bind9.16-docUpgrade bind-pkcs11-devel | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade dnsmasqUpgrade unboundUpgrade pdns-recursor | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade dnsmasqUpgrade bind-lite-develUpgrade unbound-utilsUpgrade unboundUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind-export-libsUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade unbound-libsUpgrade bind-pkcs11-develUpgrade unbound-develUpgrade dnsmasq-utilsUpgrade unbound-anchorUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bindUpgrade bind-develUpgrade unbound-debuginfoUpgrade bind-libsUpgrade python2-unboundUpgrade bind-pkcs11-utilsUpgrade dnsmasq-debuginfoUpgrade bind-export-devel | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade unbound-anchor-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-pkcs11Upgrade unbound-utils-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11-libs-debuginfoUpgrade unbound-utilsUpgrade dnsmasqUpgrade bind-debuginfoUpgrade bind-docUpgrade python3-unbound-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dnssec-docUpgrade bind-dlz-filesystemUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-utilsUpgrade bind-utils-debuginfoUpgrade dnsmasq-utilsUpgrade unbound-debugsourceUpgrade python3-unboundUpgrade unbound-libs-debuginfoUpgrade unbound-anchorUpgrade bind-dnssec-utilsUpgrade unbound-libsUpgrade dnsmasq-debugsourceUpgrade python3-bindUpgrade bind-pkcs11-utilsUpgrade unboundUpgrade bind-dlz-mysqlUpgrade bind-dlz-mysql-debuginfoUpgrade bind-develUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade unbound-debuginfoUpgrade unbound-develUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-pkcs11-develUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-libs-debuginfoUpgrade bind | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-export-libsUpgrade bind-debuginfoUpgrade dhclientUpgrade bindUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-sdbUpgrade bind-dyndb-ldapUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-export-develUpgrade dhcp-debuginfoUpgrade dhcp-commonUpgrade bind-lite-develUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade dhcpUpgrade bind-pkcs11-develUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-libs | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade unboundUpgrade systemdUpgrade bind9Upgrade pdns-recursorUpgrade dnsmasqUpgrade dnsjavaUpgrade knot-resolver | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade unboundUpgrade bind918Upgrade bind916Upgrade dnsmasqUpgrade dnsmasq-develUpgrade bind9-develUpgrade powerdns-recursorUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-networkdUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemd-udevUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-resolved | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-udevUpgrade systemd-containerUpgrade systemdUpgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-networkd | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unboundUpgrade unboundUpgrade python2-unboundUpgrade unbound-libs | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-libs | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade dhcp-serverUpgrade dnsmasqUpgrade dhcp-clientUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-dyndb-ldapUpgrade dnsmasq-utilsUpgrade bindUpgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-docUpgrade bind-chrootUpgrade bind-sdbUpgrade python3-bind9.16Upgrade unbound-develUpgrade unbound-libsUpgrade bind9.16-libsUpgrade unbound-pythonUpgrade bind9.16-licenseUpgrade dhcp-commonUpgrade dhcp-relayUpgrade bind9.16-chrootUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind9.16-utilsUpgrade bind-export-develUpgrade bind-develUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade dhcp-libsUpgrade dhcp-develUpgrade dhcpUpgrade bind9.16Upgrade unboundUpgrade python3-bindUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade dhclient | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-pkcs11-develUpgrade bind9.16-docUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade dhcp-libs-debuginfoUpgrade dhcp-debugsourceUpgrade bind-develUpgrade bind-sdb-debuginfoUpgrade dhcp-clientUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-libsUpgrade unboundUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-export-libs-debuginfoUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind-debugsourceUpgrade bind9.16-licenseUpgrade python3-bindUpgrade unbound-pythonUpgrade bind-libs-debuginfoUpgrade dhcp-develUpgrade dhcp-relayUpgrade unbound-libsUpgrade dhcp-relay-debuginfoUpgrade bind-licenseUpgrade unbound-debuginfoUpgrade bind9.16-debuginfoUpgrade bindUpgrade bind-dnssec-utilsUpgrade dhcpUpgrade bind-dyndb-ldapUpgrade unbound-debugsourceUpgrade bind-sdbUpgrade dhcp-server-debuginfoUpgrade bind9.16-utilsUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade dhcp-serverUpgrade bind-debuginfoUpgrade dnsmasqUpgrade bind-pkcs11-utils-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind9.16Upgrade bind9.16-develUpgrade dhcp-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-chrootUpgrade bind9.16-chrootUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade bind-dyndb-ldap-debuginfoUpgrade dhcp-libsUpgrade bind-libsUpgrade dhcp-client-debuginfoUpgrade bind-utilsUpgrade python3-unboundUpgrade dhcp-commonUpgrade python3-bind9.16Upgrade bind9.16-dnssec-utils-debuginfoUpgrade unbound-develUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade dhclientUpgrade bind-dnssec-docUpgrade bind-pkcs11 | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade dhcp-debugsourceUpgrade bind-export-develUpgrade dnsmasq-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade dhcp-libsUpgrade dnsmasq-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-dyndb-ldap-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind9.16-utils-debuginfoUpgrade bind-develUpgrade dhcp-server-debuginfoUpgrade bind9.16Upgrade dnsmasq-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade bind-debugsourceUpgrade bind-export-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade dhcp-debuginfoUpgrade bind-pkcs11-develUpgrade dnsmasq-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dhcp-relay-debuginfoUpgrade dhcp-relayUpgrade bind9.16-libsUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-clientUpgrade dnsmasqUpgrade bind-utilsUpgrade bind-lite-develUpgrade dhcp-serverUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-pkcs11-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind9.16-develUpgrade bind9.16-utilsUpgrade dhcp-libs-debuginfo | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade unbound-muninUpgrade libirs161Upgrade libisccc161Upgrade bindUpgrade bind-docUpgrade unboundUpgrade bind-utilsUpgrade unbound-anchorUpgrade libisc1107-32bitUpgrade libbind9-1600Upgrade pdns-recursorUpgrade libisc1606Upgrade python-bindUpgrade libdns1110Upgrade unbound-develUpgrade libirs-develUpgrade libisccfg163Upgrade bind-develUpgrade libisccc1600Upgrade libns1604Upgrade liblwres161Upgrade libbind9-161Upgrade libuv1Upgrade libunbound8Upgrade python3-bindUpgrade libisc1107Upgrade bind-chrootenvUpgrade unbound-pythonUpgrade libisccfg1600Upgrade libirs1601Upgrade libuv-develUpgrade libdns1605 | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade unboundUpgrade dnsmasq-baseUpgrade bind9Upgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-base (Ubuntu Pro)Upgrade libunbound8 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub