Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-licenseUpgrade bind9.16-docUpgrade bind-pkcs11-libsUpgrade bind9.16-licenseUpgrade python3-bind9.16Upgrade dnsmasqUpgrade unboundUpgrade bind9.16-utilsUpgrade python3-unboundUpgrade bind-docUpgrade bind-export-develUpgrade bind-sdbUpgrade bind9.16-libsUpgrade bind-pkcs11-develUpgrade unbound-libsUpgrade bind-export-libsUpgrade bind-dyndb-ldapUpgrade bind-sdb-chrootUpgrade unbound-develUpgrade bind9.16-develUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-develUpgrade bindUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind-dnssec-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade bind-libs | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade dnsmasqUpgrade pdns-recursorUpgrade unbound | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python3-unboundUpgrade bind-lite-develUpgrade dnsmasq-utilsUpgrade bind-utilsUpgrade unboundUpgrade bind-chrootUpgrade unbound-libsUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade unbound-anchorUpgrade bind-pkcs11-develUpgrade unbound-develUpgrade dnsmasqUpgrade unbound-utilsUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade unbound-debuginfoUpgrade bind-develUpgrade bindUpgrade bind-libsUpgrade python2-unboundUpgrade bind-pkcs11Upgrade bind-licenseUpgrade dnsmasq-debuginfoUpgrade bind-export-develUpgrade bind-sdb | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-dlz-mysqlUpgrade bind-libs-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade unboundUpgrade bind-pkcs11-develUpgrade dnsmasq-debugsourceUpgrade unbound-develUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade unbound-anchorUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade unbound-libsUpgrade unbound-debuginfoUpgrade bindUpgrade bind-utils-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade dnsmasq-utilsUpgrade python3-unbound-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-docUpgrade dnsmasqUpgrade bind-debuginfoUpgrade bind-dlz-ldapUpgrade unbound-libs-debuginfoUpgrade python3-unboundUpgrade bind-utilsUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-debuginfoUpgrade bind-dlz-sqlite3Upgrade unbound-utils-debuginfoUpgrade unbound-utilsUpgrade unbound-anchor-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-docUpgrade bind-dlz-sqlite3-debuginfoUpgrade unbound-debugsource | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade dhcp-debuginfoUpgrade dhcp-commonUpgrade bind-develUpgrade bind-libsUpgrade dhcpUpgrade dhcp-libsUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade dhcp-develUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade dhclientUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bindUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind-dyndb-ldap | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade dnsjavaUpgrade knot-resolverUpgrade bind9Upgrade dnsmasqUpgrade unboundUpgrade pdns-recursorUpgrade systemd | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Apr 4, 2024 | Feb 14, 2024 |
| Freebsd | — | Upgrade unboundUpgrade bind916Upgrade bind918Upgrade dnsmasqUpgrade dnsmasq-develUpgrade powerdns-recursorUpgrade bind9-develUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemdUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-nspawnUpgrade systemd-networkd | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-containerUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-timesyncdUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-libs | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemdUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-udev | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unboundUpgrade python2-unboundUpgrade python3-unboundUpgrade unbound-libs | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-containerUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compat | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-02 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5034769)2024-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5034809)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2012 (KB5034830)2024-02 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5034770)2024-02 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5034767)2024-02 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5034768)2024-02 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5034819) | Feb 13, 2024 | Feb 13, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade bind9.16-docUpgrade bind-export-develUpgrade bind-export-libsUpgrade unbound-pythonUpgrade dhcp-commonUpgrade dhcp-relayUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade dhclientUpgrade bind-sdb-chrootUpgrade python3-unboundUpgrade bind9.16Upgrade dhcp-libsUpgrade dhcpUpgrade dhcp-develUpgrade python3-bindUpgrade unboundUpgrade bind9.16-develUpgrade bind-dyndb-ldapUpgrade bind-utilsUpgrade bind-docUpgrade bind-dnssec-docUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-sdbUpgrade unbound-libsUpgrade unbound-develUpgrade python3-bind9.16Upgrade bind-libsUpgrade bind-pkcs11-libsUpgrade dhcp-serverUpgrade dnsmasqUpgrade bind-chrootUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade dhcp-clientUpgrade bind-pkcs11 | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind-dnssec-docUpgrade bind9.16Upgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade bind-lite-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-chrootUpgrade unbound-libs-debuginfoUpgrade bind9.16-chrootUpgrade dhcp-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade dhcp-libsUpgrade bind-debuginfoUpgrade bind-libsUpgrade bind9.16-utils-debuginfoUpgrade unbound-debugsourceUpgrade python3-unboundUpgrade dhcp-server-debuginfoUpgrade bind9.16-debugsourceUpgrade dhclientUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade dhcp-commonUpgrade dhcp-client-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade python3-bind9.16Upgrade dnsmasqUpgrade dhcp-serverUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade python3-unbound-debuginfoUpgrade bind-dyndb-ldapUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade unbound-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-docUpgrade bind-export-libsUpgrade bind9.16-debuginfoUpgrade bindUpgrade dhcpUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-sdb-debuginfoUpgrade dhcp-libs-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-licenseUpgrade dhcp-develUpgrade unbound-pythonUpgrade dhcp-relayUpgrade bind-sdb-chrootUpgrade bind-libs-debuginfoUpgrade unbound-debuginfoUpgrade python3-bindUpgrade bind-export-develUpgrade bind9.16-libsUpgrade unboundUpgrade bind-pkcs11-utilsUpgrade dhcp-relay-debuginfoUpgrade bind-develUpgrade dhcp-clientUpgrade dhcp-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-develUpgrade unbound-libsUpgrade bind9.16-dnssec-utilsUpgrade dnsmasq-debugsourceUpgrade bind-dyndb-ldap-debugsource | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade dhcp-serverUpgrade bind-dnssec-utilsUpgrade dhcp-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.16-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind9.16-develUpgrade bind-utilsUpgrade dhcp-clientUpgrade bind9.16-utilsUpgrade dnsmasqUpgrade bind9.16-libsUpgrade dhcp-relay-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-debugsourceUpgrade dhcp-relayUpgrade bind-debugsourceUpgrade dnsmasq-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-libs-liteUpgrade dnsmasq-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libsUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-libs-debuginfoUpgrade bindUpgrade bind-sdb-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-debuginfoUpgrade dhcp-debugsourceUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind-develUpgrade dhcp-server-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind-export-libs-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade bind-export-develUpgrade dnsmasq-debugsourceUpgrade dhcp-libsUpgrade dhcp-debuginfoUpgrade bind-pkcs11-utils | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade bind-docUpgrade bind-utilsUpgrade bindUpgrade pdns-recursorUpgrade unbound-anchorUpgrade libisc1606Upgrade libisccc161Upgrade libirs161Upgrade libirs-develUpgrade unbound-develUpgrade libisc1107-32bitUpgrade unboundUpgrade unbound-muninUpgrade python-bindUpgrade libbind9-1600Upgrade libdns1110Upgrade bind-chrootenvUpgrade liblwres161Upgrade libisccfg1600Upgrade libuv1Upgrade libunbound8Upgrade libbind9-161Upgrade libns1604Upgrade libdns1605Upgrade libuv-develUpgrade libisccfg163Upgrade unbound-pythonUpgrade libirs1601Upgrade libisccc1600Upgrade libisc1107Upgrade python3-bindUpgrade bind-devel | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade libunbound8Upgrade unboundUpgrade bind9 (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade dnsmasq-base (Ubuntu Pro)Upgrade bind9 | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub