The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bindalma-upgrade-bind-chrootalma-upgrade-bind-develalma-upgrade-bind-dnssec-docalma-upgrade-bind-dnssec-utilsalma-upgrade-bind-docalma-upgrade-bind-dyndb-ldapalma-upgrade-bind-export-develalma-upgrade-bind-export-libsalma-upgrade-bind-libsalma-upgrade-bind-libs-litealma-upgrade-bind-licensealma-upgrade-bind-lite-develalma-upgrade-bind-pkcs11alma-upgrade-bind-pkcs11-develalma-upgrade-bind-pkcs11-libsalma-upgrade-bind-pkcs11-utilsalma-upgrade-bind-sdbalma-upgrade-bind-sdb-chrootalma-upgrade-bind-utilsalma-upgrade-bind9.16alma-upgrade-bind9.16-chrootalma-upgrade-bind9.16-develalma-upgrade-bind9.16-dnssec-utilsalma-upgrade-bind9.16-docalma-upgrade-bind9.16-libsalma-upgrade-bind9.16-licensealma-upgrade-bind9.16-utilsalma-upgrade-dnsmasqalma-upgrade-dnsmasq-utilsalma-upgrade-python3-bindalma-upgrade-python3-bind9.16alma-upgrade-python3-unboundalma-upgrade-unboundalma-upgrade-unbound-develalma-upgrade-unbound-libs | Feb 29, 2024 | Feb 14, 2024 | |
| Alpine Linux | alpine-linux-upgrade-bindalpine-linux-upgrade-dnsmasqalpine-linux-upgrade-unboundalpine-linux-upgrade-knot-resolveralpine-linux-upgrade-pdns-recursor | Mar 26, 2024 | Feb 14, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utilsamazon-linux-ami-2-upgrade-dnsmasqamazon-linux-ami-2-upgrade-dnsmasq-debuginfoamazon-linux-ami-2-upgrade-dnsmasq-utilsamazon-linux-ami-2-upgrade-python2-unboundamazon-linux-ami-2-upgrade-python3-unboundamazon-linux-ami-2-upgrade-unboundamazon-linux-ami-2-upgrade-unbound-anchoramazon-linux-ami-2-upgrade-unbound-debuginfoamazon-linux-ami-2-upgrade-unbound-develamazon-linux-ami-2-upgrade-unbound-libsamazon-linux-ami-2-upgrade-unbound-utils | Mar 5, 2024 | Feb 14, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bindamazon-linux-2023-upgrade-bind-chrootamazon-linux-2023-upgrade-bind-debuginfoamazon-linux-2023-upgrade-bind-debugsourceamazon-linux-2023-upgrade-bind-develamazon-linux-2023-upgrade-bind-dlz-filesystemamazon-linux-2023-upgrade-bind-dlz-filesystem-debuginfoamazon-linux-2023-upgrade-bind-dlz-ldapamazon-linux-2023-upgrade-bind-dlz-ldap-debuginfoamazon-linux-2023-upgrade-bind-dlz-mysqlamazon-linux-2023-upgrade-bind-dlz-mysql-debuginfoamazon-linux-2023-upgrade-bind-dlz-sqlite3amazon-linux-2023-upgrade-bind-dlz-sqlite3-debuginfoamazon-linux-2023-upgrade-bind-dnssec-docamazon-linux-2023-upgrade-bind-dnssec-utilsamazon-linux-2023-upgrade-bind-dnssec-utils-debuginfoamazon-linux-2023-upgrade-bind-docamazon-linux-2023-upgrade-bind-libsamazon-linux-2023-upgrade-bind-libs-debuginfoamazon-linux-2023-upgrade-bind-licenseamazon-linux-2023-upgrade-bind-pkcs11amazon-linux-2023-upgrade-bind-pkcs11-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-develamazon-linux-2023-upgrade-bind-pkcs11-libsamazon-linux-2023-upgrade-bind-pkcs11-libs-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-utilsamazon-linux-2023-upgrade-bind-pkcs11-utils-debuginfoamazon-linux-2023-upgrade-bind-utilsamazon-linux-2023-upgrade-bind-utils-debuginfoamazon-linux-2023-upgrade-dnsmasqamazon-linux-2023-upgrade-dnsmasq-debuginfoamazon-linux-2023-upgrade-dnsmasq-debugsourceamazon-linux-2023-upgrade-dnsmasq-utilsamazon-linux-2023-upgrade-dnsmasq-utils-debuginfoamazon-linux-2023-upgrade-python3-bindamazon-linux-2023-upgrade-python3-unboundamazon-linux-2023-upgrade-python3-unbound-debuginfoamazon-linux-2023-upgrade-unboundamazon-linux-2023-upgrade-unbound-anchoramazon-linux-2023-upgrade-unbound-anchor-debuginfoamazon-linux-2023-upgrade-unbound-debuginfoamazon-linux-2023-upgrade-unbound-debugsourceamazon-linux-2023-upgrade-unbound-develamazon-linux-2023-upgrade-unbound-libsamazon-linux-2023-upgrade-unbound-libs-debuginfoamazon-linux-2023-upgrade-unbound-utilsamazon-linux-2023-upgrade-unbound-utils-debuginfo | Feb 17, 2025 | Feb 13, 2024 | |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-develcentos-upgrade-bind-dyndb-ldapcentos-upgrade-bind-dyndb-ldap-debuginfocentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utilscentos-upgrade-dhclientcentos-upgrade-dhcpcentos-upgrade-dhcp-commoncentos-upgrade-dhcp-debuginfocentos-upgrade-dhcp-develcentos-upgrade-dhcp-libs | Jun 11, 2024 | Feb 14, 2024 |
| Debian | debian-upgrade-bind9debian-upgrade-dnsmasqdebian-upgrade-knot-resolverdebian-upgrade-pdns-recursordebian-upgrade-systemddebian-upgrade-unbound | Feb 23, 2024 | Feb 14, 2024 | |
| Dell Powerstore Dsa2024462 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Nov 20, 2024 | |
| Dell Powerstore Dsa2024497 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Dec 19, 2024 | |
| Dell Powerstore Dsa2025050 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 28, 2025 | |
| Dns Bind | upgrade-isc-bind-latest | Feb 15, 2024 | Feb 15, 2024 | |
| Freebsd | freebsd-upgrade-package-powerdns-recursorfreebsd-upgrade-package-bind916freebsd-upgrade-package-bind918freebsd-upgrade-package-bind9-develfreebsd-upgrade-package-dnsmasqfreebsd-upgrade-package-dnsmasq-develfreebsd-upgrade-package-unboundfreebsd-upgrade-base-14_0-release-p6freebsd-upgrade-base-13_2-release-p11 | Feb 16, 2024 | Feb 16, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-dnsmasq | Dec 9, 2024 | Feb 14, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-systemdhuawei-euleros-2_0_sp10-upgrade-systemd-containerhuawei-euleros-2_0_sp10-upgrade-systemd-libshuawei-euleros-2_0_sp10-upgrade-systemd-networkdhuawei-euleros-2_0_sp10-upgrade-systemd-nspawnhuawei-euleros-2_0_sp10-upgrade-systemd-pamhuawei-euleros-2_0_sp10-upgrade-systemd-resolvedhuawei-euleros-2_0_sp10-upgrade-systemd-timesyncdhuawei-euleros-2_0_sp10-upgrade-systemd-udevhuawei-euleros-2_0_sp10-upgrade-systemd-udev-compat | May 13, 2024 | Feb 14, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-python3-unboundhuawei-euleros-2_0_sp11-upgrade-unboundhuawei-euleros-2_0_sp11-upgrade-unbound-libs | Jun 3, 2024 | Feb 14, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-systemdhuawei-euleros-2_0_sp12-upgrade-systemd-containerhuawei-euleros-2_0_sp12-upgrade-systemd-libshuawei-euleros-2_0_sp12-upgrade-systemd-networkdhuawei-euleros-2_0_sp12-upgrade-systemd-nspawnhuawei-euleros-2_0_sp12-upgrade-systemd-pamhuawei-euleros-2_0_sp12-upgrade-systemd-resolvedhuawei-euleros-2_0_sp12-upgrade-systemd-timesyncdhuawei-euleros-2_0_sp12-upgrade-systemd-udevhuawei-euleros-2_0_sp12-upgrade-systemd-udev-compat | Jul 1, 2024 | Feb 14, 2024 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python2-unboundhuawei-euleros-2_0_sp8-upgrade-python3-unboundhuawei-euleros-2_0_sp8-upgrade-unboundhuawei-euleros-2_0_sp8-upgrade-unbound-libs | Jul 23, 2024 | Feb 14, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-systemdhuawei-euleros-2_0_sp9-upgrade-systemd-containerhuawei-euleros-2_0_sp9-upgrade-systemd-libshuawei-euleros-2_0_sp9-upgrade-systemd-udevhuawei-euleros-2_0_sp9-upgrade-systemd-udev-compat | Apr 9, 2024 | Feb 14, 2024 | |
| Ibm Aix | ibm-aix-bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 | |
| Msft | microsoft-windows-windows_server_2012-kb5039260microsoft-windows-windows_server_2012_r2-kb5039294microsoft-windows-windows_server_2016-1607-kb5039214microsoft-windows-windows_server_2019-1809-kb5039217microsoft-windows-windows_server_2022-21h2-kb5039227microsoft-windows-windows_server_2022-22h2-kb5039227microsoft-windows-windows_server_2022-23h2-kb5039236 | Jun 11, 2024 | Jun 11, 2024 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 10, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind9-16oracle-linux-upgrade-bind9-16-chrootoracle-linux-upgrade-bind9-16-develoracle-linux-upgrade-bind9-16-dnssec-utilsoracle-linux-upgrade-bind9-16-docoracle-linux-upgrade-bind9-16-libsoracle-linux-upgrade-bind9-16-licenseoracle-linux-upgrade-bind9-16-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-dnssec-docoracle-linux-upgrade-bind-dnssec-utilsoracle-linux-upgrade-bind-docoracle-linux-upgrade-bind-dyndb-ldaporacle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-dhclientoracle-linux-upgrade-dhcporacle-linux-upgrade-dhcp-clientoracle-linux-upgrade-dhcp-commonoracle-linux-upgrade-dhcp-develoracle-linux-upgrade-dhcp-libsoracle-linux-upgrade-dhcp-relayoracle-linux-upgrade-dhcp-serveroracle-linux-upgrade-dnsmasqoracle-linux-upgrade-dnsmasq-utilsoracle-linux-upgrade-python3-bindoracle-linux-upgrade-python3-bind9-16oracle-linux-upgrade-python3-unboundoracle-linux-upgrade-unboundoracle-linux-upgrade-unbound-develoracle-linux-upgrade-unbound-libsoracle-linux-upgrade-unbound-python | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-dnssec-docredhat-upgrade-bind-dnssec-utilsredhat-upgrade-bind-dnssec-utils-debuginforedhat-upgrade-bind-docredhat-upgrade-bind-dyndb-ldapredhat-upgrade-bind-dyndb-ldap-debuginforedhat-upgrade-bind-dyndb-ldap-debugsourceredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-bind9-16redhat-upgrade-bind9-16-chrootredhat-upgrade-bind9-16-debuginforedhat-upgrade-bind9-16-debugsourceredhat-upgrade-bind9-16-develredhat-upgrade-bind9-16-dnssec-utilsredhat-upgrade-bind9-16-dnssec-utils-debuginforedhat-upgrade-bind9-16-docredhat-upgrade-bind9-16-libsredhat-upgrade-bind9-16-libs-debuginforedhat-upgrade-bind9-16-licenseredhat-upgrade-bind9-16-utilsredhat-upgrade-bind9-16-utils-debuginforedhat-upgrade-dhclientredhat-upgrade-dhcpredhat-upgrade-dhcp-clientredhat-upgrade-dhcp-client-debuginforedhat-upgrade-dhcp-commonredhat-upgrade-dhcp-debuginforedhat-upgrade-dhcp-debugsourceredhat-upgrade-dhcp-develredhat-upgrade-dhcp-libsredhat-upgrade-dhcp-libs-debuginforedhat-upgrade-dhcp-relayredhat-upgrade-dhcp-relay-debuginforedhat-upgrade-dhcp-serverredhat-upgrade-dhcp-server-debuginforedhat-upgrade-dnsmasqredhat-upgrade-dnsmasq-debuginforedhat-upgrade-dnsmasq-debugsourceredhat-upgrade-dnsmasq-utilsredhat-upgrade-dnsmasq-utils-debuginforedhat-upgrade-python3-bindredhat-upgrade-python3-bind9-16redhat-upgrade-python3-unboundredhat-upgrade-python3-unbound-debuginforedhat-upgrade-unboundredhat-upgrade-unbound-debuginforedhat-upgrade-unbound-debugsourceredhat-upgrade-unbound-develredhat-upgrade-unbound-libsredhat-upgrade-unbound-libs-debuginforedhat-upgrade-unbound-python | Feb 27, 2024 | Feb 14, 2024 | |
| Rocky_linux | rocky-upgrade-bindrocky-upgrade-bind-chrootrocky-upgrade-bind-debuginforocky-upgrade-bind-debugsourcerocky-upgrade-bind-develrocky-upgrade-bind-dnssec-utilsrocky-upgrade-bind-dnssec-utils-debuginforocky-upgrade-bind-dyndb-ldaprocky-upgrade-bind-dyndb-ldap-debuginforocky-upgrade-bind-dyndb-ldap-debugsourcerocky-upgrade-bind-export-develrocky-upgrade-bind-export-libsrocky-upgrade-bind-export-libs-debuginforocky-upgrade-bind-libsrocky-upgrade-bind-libs-debuginforocky-upgrade-bind-libs-literocky-upgrade-bind-libs-lite-debuginforocky-upgrade-bind-lite-develrocky-upgrade-bind-pkcs11rocky-upgrade-bind-pkcs11-debuginforocky-upgrade-bind-pkcs11-develrocky-upgrade-bind-pkcs11-libsrocky-upgrade-bind-pkcs11-libs-debuginforocky-upgrade-bind-pkcs11-utilsrocky-upgrade-bind-pkcs11-utils-debuginforocky-upgrade-bind-sdbrocky-upgrade-bind-sdb-chrootrocky-upgrade-bind-sdb-debuginforocky-upgrade-bind-utilsrocky-upgrade-bind-utils-debuginforocky-upgrade-bind9.16rocky-upgrade-bind9.16-chrootrocky-upgrade-bind9.16-debuginforocky-upgrade-bind9.16-debugsourcerocky-upgrade-bind9.16-develrocky-upgrade-bind9.16-dnssec-utilsrocky-upgrade-bind9.16-dnssec-utils-debuginforocky-upgrade-bind9.16-libsrocky-upgrade-bind9.16-libs-debuginforocky-upgrade-bind9.16-utilsrocky-upgrade-bind9.16-utils-debuginforocky-upgrade-dhcp-clientrocky-upgrade-dhcp-client-debuginforocky-upgrade-dhcp-debuginforocky-upgrade-dhcp-debugsourcerocky-upgrade-dhcp-libsrocky-upgrade-dhcp-libs-debuginforocky-upgrade-dhcp-relayrocky-upgrade-dhcp-relay-debuginforocky-upgrade-dhcp-serverrocky-upgrade-dhcp-server-debuginforocky-upgrade-dnsmasqrocky-upgrade-dnsmasq-debuginforocky-upgrade-dnsmasq-debugsourcerocky-upgrade-dnsmasq-utilsrocky-upgrade-dnsmasq-utils-debuginfo | Mar 28, 2024 | Feb 14, 2024 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-docsuse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisccc1600suse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-libunbound8suse-upgrade-libuv-develsuse-upgrade-libuv1suse-upgrade-pdns-recursorsuse-upgrade-python-bindsuse-upgrade-python3-bindsuse-upgrade-unboundsuse-upgrade-unbound-anchorsuse-upgrade-unbound-develsuse-upgrade-unbound-muninsuse-upgrade-unbound-python | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | ubuntu-pro-upgrade-bind9ubuntu-pro-upgrade-dnsmasq-baseubuntu-upgrade-bind9ubuntu-upgrade-dnsmasq-baseubuntu-upgrade-libunbound8ubuntu-upgrade-unbound | Feb 14, 2024 | Feb 13, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub