MITRE https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html [No types assigned]

MITRE https://security.netapp.com/advisory/ntap-20240307-0007/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/ [No types assigned]

MITRE https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html [No types assigned]

OR
     *cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* versions from (including) 9.0.0 up to (including) 9.16.46
     *cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* versions from (including) 9.18.0 up to (including) 9.18.22
     *cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* versions from (including) 9.19.0 up to (including) 9.19.20

OR
     *cpe:2.3:a:nic:knot_resolver:*:*:*:*:*:*:*:* versions up to (excluding) 5.71

OR
     *cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:* versions up to (excluding) 1.19.1

OR
     *cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:* versions from (including) 4.8.0 up to (excluding) 4.8.6
     *cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:* versions from (including) 4.9.0 up to (excluding) 4.9.3
     *cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (excluding) 5.0.2

OR
     *cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:* versions up to (excluding) 2.90

OR
     *cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2022_23h2:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST CWE-770

http://www.openwall.com/lists/oss-security/2024/02/16/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2024/02/16/2 Mailing List

http://www.openwall.com/lists/oss-security/2024/02/16/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2024/02/16/3 Mailing List

https://access.redhat.com/security/cve/CVE-2023-50387 No Types Assigned

https://access.redhat.com/security/cve/CVE-2023-50387 Third Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1219823 No Types Assigned

https://bugzilla.suse.com/show_bug.cgi?id=1219823 Issue Tracking

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html No Types Assigned

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Third Party Advisory

https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1 No Types Assigned

https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1 Patch

https://kb.isc.org/docs/cve-2023-50387 No Types Assigned

https://kb.isc.org/docs/cve-2023-50387 Third Party Advisory, VDB Entry

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/ Mailing List

https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html No Types Assigned

https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html Mailing List, Third Party Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387 No Types Assigned

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387 Patch, Vendor Advisory

https://news.ycombinator.com/item?id=39367411 No Types Assigned

https://news.ycombinator.com/item?id=39367411 Third Party Advisory

https://news.ycombinator.com/item?id=39372384 No Types Assigned

https://news.ycombinator.com/item?id=39372384 Issue Tracking

https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/ No Types Assigned

https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/ Vendor Advisory

https://www.athene-center.de/aktuelles/key-trap No Types Assigned

https://www.athene-center.de/aktuelles/key-trap Third Party Advisory

https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf No Types Assigned

https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf Technical Description, Third Party Advisory

https://www.isc.org/blogs/2024-bind-security-release/ No Types Assigned

https://www.isc.org/blogs/2024-bind-security-release/ Third Party Advisory

https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/ No Types Assigned

https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/ Press/Media Coverage, Third Party Advisory

https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/ No Types Assigned

https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/ Patch, Third Party Advisory

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/ [No types assigned]

MITRE http://www.openwall.com/lists/oss-security/2024/02/16/3 [No types assigned]

MITRE http://www.openwall.com/lists/oss-security/2024/02/16/2 [No types assigned]

Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

MITRE https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf [No types assigned]

MITRE https://datatracker.ietf.org/doc/html/rfc4035

MITRE https://access.redhat.com/security/cve/CVE-2023-50387 [No types assigned]

MITRE https://bugzilla.suse.com/show_bug.cgi?id=1219823 [No types assigned]

MITRE https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387 [No types assigned]

MITRE https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1 [No types assigned]

MITRE https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html [No types assigned]

MITRE https://news.ycombinator.com/item?id=39372384 [No types assigned]

Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

MITRE https://datatracker.ietf.org/doc/html/rfc4035 [No types assigned]

MITRE https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html [No types assigned]

MITRE https://kb.isc.org/docs/cve-2023-50387 [No types assigned]

MITRE https://news.ycombinator.com/item?id=39367411 [No types assigned]

MITRE https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/ [No types assigned]

MITRE https://www.athene-center.de/aktuelles/key-trap [No types assigned]

MITRE https://www.isc.org/blogs/2024-bind-security-release/ [No types assigned]

MITRE https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/ [No types assigned]

MITRE https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/ [No types assigned]