The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bindUpgrade bind-utilsUpgrade bind9.16-licenseUpgrade bind-libsUpgrade bind-develUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind9.16-utilsUpgrade python3-bindUpgrade python3-bind9.16Upgrade bind9.16-develUpgrade bind9.16-chrootUpgrade bind-pkcs11-libsUpgrade dnsmasqUpgrade bind-docUpgrade bind-export-develUpgrade unboundUpgrade python3-unboundUpgrade unbound-develUpgrade unbound-libsUpgrade dnsmasq-utilsUpgrade bind9.16-docUpgrade bind-sdbUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-dnssec-docUpgrade bind-dyndb-ldap | Feb 29, 2024 | Feb 14, 2024 |
| Alpine Linux | — | Upgrade knot-resolverUpgrade bindUpgrade unboundUpgrade dnsmasqUpgrade pdns-recursor | Mar 26, 2024 | Feb 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-export-libsUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-export-develUpgrade unbound-develUpgrade unbound-debuginfoUpgrade unbound-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade python3-unboundUpgrade bind-sdb-chrootUpgrade dnsmasq-utilsUpgrade unboundUpgrade python2-unboundUpgrade unbound-anchorUpgrade unbound-libsUpgrade bind-utilsUpgrade bind-chrootUpgrade dnsmasq-debuginfoUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade dnsmasqUpgrade bind-libs | Mar 5, 2024 | Feb 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11-utils-debuginfoUpgrade dnsmasq-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-debugsourceUpgrade python3-unbound-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-libsUpgrade bind-dlz-ldap-debuginfoUpgrade bind-pkcs11-develUpgrade bindUpgrade unbound-debuginfoUpgrade bind-dlz-ldapUpgrade bind-libs-debuginfoUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade dnsmasq-debugsourceUpgrade unbound-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11Upgrade unbound-utilsUpgrade bind-debuginfoUpgrade bind-dlz-filesystemUpgrade unbound-debugsourceUpgrade bind-dlz-mysqlUpgrade bind-develUpgrade bind-chrootUpgrade bind-dlz-sqlite3Upgrade unbound-anchorUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade dnsmasq-utilsUpgrade unbound-anchor-debuginfoUpgrade bind-pkcs11-libsUpgrade dnsmasqUpgrade bind-dnssec-docUpgrade python3-unboundUpgrade python3-bindUpgrade dnsmasq-utils-debuginfoUpgrade unbound-libsUpgrade unboundUpgrade bind-dlz-filesystem-debuginfoUpgrade unbound-develUpgrade bind-dnssec-utilsUpgrade unbound-libs-debuginfoUpgrade bind-pkcs11-debuginfo | Feb 17, 2025 | Feb 13, 2024 |
| Centos_linux | — | Upgrade bind-pkcs11-libsUpgrade bindUpgrade bind-dyndb-ldap-debuginfoUpgrade dhcp-debuginfoUpgrade dhclientUpgrade bind-sdbUpgrade dhcp-libsUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-libsUpgrade bind-dyndb-ldapUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-chrootUpgrade dhcp-develUpgrade bind-export-develUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-pkcs11Upgrade dhcp-commonUpgrade dhcpUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-libs-lite | Jun 11, 2024 | Feb 14, 2024 |
| Debian | — | Upgrade unboundUpgrade systemdUpgrade knot-resolverUpgrade dnsmasqUpgrade bind9Upgrade dnsjavaUpgrade pdns-recursor | Feb 23, 2024 | Feb 14, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 15, 2024 | Feb 15, 2024 |
| F5 Big Ip | — | — | Feb 6, 2026 | Feb 6, 2026 |
| Freebsd | — | Upgrade bind916Upgrade dnsmasqUpgrade bind918Upgrade unboundUpgrade dnsmasq-develUpgrade bind9-develUpgrade powerdns-recursorUpgrade FreeBSD | Feb 16, 2024 | Feb 16, 2024 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Dec 9, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-resolved | May 13, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade unbound-libsUpgrade python3-unboundUpgrade unbound | Jun 3, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-containerUpgrade systemd-pamUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compat | Jul 1, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unboundUpgrade unbound-libsUpgrade python2-unboundUpgrade python3-unbound | Jul 23, 2024 | Feb 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-udev-compat | Apr 9, 2024 | Feb 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory26 | Jun 5, 2024 | Feb 14, 2024 |
| Msft | — | 2024-06 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5039214)2024-06 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5039217)2024-06 Cumulative Update for Microsoft Windows Server 2012 R2 (KB5039294)2024-06 Cumulative Update for Microsoft Windows Server 2012 (KB5039260)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5039227)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5039236)2024-06 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5039227) | Jun 11, 2024 | Jun 11, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade bind-lite-develUpgrade bind-sdb-chrootUpgrade unbound-pythonUpgrade bind9.16-licenseUpgrade bind-pkcs11Upgrade bind9.16-chrootUpgrade dhcp-relayUpgrade dhcp-serverUpgrade python3-unboundUpgrade dnsmasq-utilsUpgrade dhcp-libsUpgrade dhcp-develUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade dhclientUpgrade dhcp-commonUpgrade bind-pkcs11-develUpgrade bind9.16Upgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade bind-utilsUpgrade bind-libs-liteUpgrade dhcpUpgrade bind-dyndb-ldapUpgrade unboundUpgrade bind-export-develUpgrade unbound-libsUpgrade python3-bind9.16Upgrade bind-dnssec-utilsUpgrade unbound-develUpgrade bind-dnssec-docUpgrade bindUpgrade bind-export-libsUpgrade dnsmasqUpgrade bind-licenseUpgrade bind9.16-utilsUpgrade bind9.16-libsUpgrade bind9.16-docUpgrade bind-docUpgrade bind-chrootUpgrade bind-sdbUpgrade dhcp-client | Feb 28, 2024 | Feb 13, 2024 |
| Redhat_linux | — | Upgrade bind9.16-libsUpgrade bind-utils-debuginfoUpgrade bind-docUpgrade bind-pkcs11-utilsUpgrade dhcp-clientUpgrade bind9.16-dnssec-utilsUpgrade bind-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-dnssec-utilsUpgrade unboundUpgrade bind-export-libsUpgrade dhcp-relay-debuginfoUpgrade bind-debugsourceUpgrade dhcp-debugsourceUpgrade bind-export-develUpgrade dhcp-relayUpgrade bind9.16-docUpgrade unbound-libsUpgrade bind-licenseUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-develUpgrade dnsmasq-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade bindUpgrade bind-libs-liteUpgrade dnsmasqUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-licenseUpgrade dhcp-develUpgrade bind9.16-develUpgrade bind-pkcs11-debuginfoUpgrade dhcp-client-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-bind9.16Upgrade bind-pkcs11-libsUpgrade dhcp-commonUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade unbound-debuginfoUpgrade bind-lite-develUpgrade unbound-pythonUpgrade bind9.16-utilsUpgrade unbound-debugsourceUpgrade bind9.16-dnssec-utils-debuginfoUpgrade dnsmasq-debuginfoUpgrade python3-unbound-debuginfoUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-debuginfoUpgrade unbound-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-libsUpgrade dhclientUpgrade bind9.16-utils-debuginfoUpgrade bind-dnssec-docUpgrade dhcpUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade python3-unboundUpgrade python3-bindUpgrade bind9.16Upgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade dhcp-server-debuginfoUpgrade unbound-develUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11Upgrade dnsmasq-utilsUpgrade bind-develUpgrade bind-dyndb-ldapUpgrade bind-debuginfoUpgrade dhcp-libs-debuginfoUpgrade dhcp-server | Feb 27, 2024 | Feb 14, 2024 |
| Rocky_linux | — | Upgrade bind-dnssec-utilsUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind9.16-debuginfoUpgrade dhcp-relay-debuginfoUpgrade bind-pkcs11Upgrade dhcp-serverUpgrade dhcp-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.16Upgrade dhcp-server-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade dnsmasq-debuginfoUpgrade bind-export-develUpgrade bind-develUpgrade bind-sdb-chrootUpgrade dhcp-libsUpgrade bind-libs-liteUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-export-libsUpgrade bind-export-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade dhcp-clientUpgrade dhcp-relayUpgrade dnsmasq-utilsUpgrade dnsmasq-utils-debuginfoUpgrade bind9.16-develUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade dnsmasq-debugsourceUpgrade bindUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade dhcp-client-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade bind-lite-develUpgrade bind9.16-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind-dyndb-ldapUpgrade dhcp-debugsourceUpgrade dhcp-debuginfoUpgrade bind-pkcs11-develUpgrade dnsmasqUpgrade bind-libs-lite-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdbUpgrade bind9.16-utils-debuginfoUpgrade bind-dyndb-ldap-debugsource | Mar 28, 2024 | Feb 14, 2024 |
| Suse | — | Upgrade libisccc161Upgrade libdns1110Upgrade bindUpgrade libisc1107-32bitUpgrade bind-develUpgrade libbind9-161Upgrade bind-chrootenvUpgrade python3-bindUpgrade libirs-develUpgrade bind-utilsUpgrade libisc1107Upgrade unbound-anchorUpgrade libisccfg163Upgrade liblwres161Upgrade unbound-develUpgrade unboundUpgrade python-bindUpgrade libirs161Upgrade libisccfg1600Upgrade libisccc1600Upgrade unbound-pythonUpgrade unbound-muninUpgrade libirs1601Upgrade libuv1Upgrade libuv-develUpgrade libns1604Upgrade libdns1605Upgrade libunbound8Upgrade libbind9-1600Upgrade libisc1606Upgrade pdns-recursorUpgrade bind-doc | Feb 15, 2024 | Feb 14, 2024 |
| Ubuntu | — | Upgrade dnsmasq-baseUpgrade bind9Upgrade dnsmasq-base (Ubuntu Pro)Upgrade unboundUpgrade libunbound8Upgrade bind9 (Ubuntu Pro) | Feb 14, 2024 | Feb 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub