Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "bind9-dnsutils",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "bind9-libs",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "bind9-utils",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.16.48-0ubuntu0.20.04.1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "dnsmasq",
"binary_version": "2.90-0ubuntu0.20.04.1"
},
{
"binary_name": "dnsmasq-base",
"binary_version": "2.90-0ubuntu0.20.04.1"
},
{
"binary_name": "dnsmasq-base-lua",
"binary_version": "2.90-0ubuntu0.20.04.1"
},
{
"binary_name": "dnsmasq-utils",
"binary_version": "2.90-0ubuntu0.20.04.1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "libunbound8",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "python-unbound",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "unbound",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.9.4-2ubuntu1.5"
},
{
"binary_name": "unbound-host",
"binary_version": "1.9.4-2ubuntu1.5"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "libbind-dev",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libbind9-161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libdns-export1109",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libdns1109",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libirs-export161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libirs161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisc-export1105",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisc1105",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisccc-export161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisccc161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisccfg-export163",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "libisccfg163",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
},
{
"binary_name": "liblwres161",
"binary_version": "1:9.11.16+dfsg-3~ubuntu1"
}
]
}{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9-dev",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9-dnsutils",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9-libs",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9-utils",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.18.18-0ubuntu0.22.04.2"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "libbind-dev",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libbind9-161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libdns-export1110",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libdns1110",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libirs-export161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libirs161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisc-export1105",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisc1105",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisccc-export161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisccc161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisccfg-export163",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "libisccfg163",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
},
{
"binary_name": "liblwres161",
"binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
}
]
}{
"binaries": [
{
"binary_name": "dnsmasq",
"binary_version": "2.90-0ubuntu0.22.04.1"
},
{
"binary_name": "dnsmasq-base",
"binary_version": "2.90-0ubuntu0.22.04.1"
},
{
"binary_name": "dnsmasq-base-lua",
"binary_version": "2.90-0ubuntu0.22.04.1"
},
{
"binary_name": "dnsmasq-utils",
"binary_version": "2.90-0ubuntu0.22.04.1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.13.1-1ubuntu5.4"
},
{
"binary_name": "libunbound8",
"binary_version": "1.13.1-1ubuntu5.4"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.13.1-1ubuntu5.4"
},
{
"binary_name": "unbound",
"binary_version": "1.13.1-1ubuntu5.4"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.13.1-1ubuntu5.4"
},
{
"binary_name": "unbound-host",
"binary_version": "1.13.1-1ubuntu5.4"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "isc-dhcp-client",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-client-ddns",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-common",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-dev",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-keama",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-relay",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server-ldap",
"binary_version": "4.4.3-P1-4ubuntu2"
}
]
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.19.1-1ubuntu1"
},
{
"binary_name": "libunbound8",
"binary_version": "1.19.1-1ubuntu1"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.19.1-1ubuntu1"
},
{
"binary_name": "unbound",
"binary_version": "1.19.1-1ubuntu1"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.19.1-1ubuntu1"
},
{
"binary_name": "unbound-host",
"binary_version": "1.19.1-1ubuntu1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "isc-dhcp-client",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-client-ddns",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-common",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-dev",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-keama",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-relay",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server-ldap",
"binary_version": "4.4.3-P1-4ubuntu2"
}
]
}{
"binaries": [
{
"binary_name": "isc-dhcp-client",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-client-ddns",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-common",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-dev",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-keama",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-relay",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server",
"binary_version": "4.4.3-P1-4ubuntu2"
},
{
"binary_name": "isc-dhcp-server-ldap",
"binary_version": "4.4.3-P1-4ubuntu2"
}
]
}{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libbind9-90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libdns100",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libisc95",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libisccc90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "libisccfg90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "liblwres90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm12"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
},
{
"binary_name": "libunbound2",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
},
{
"binary_name": "python-unbound",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
},
{
"binary_name": "unbound",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
},
{
"binary_name": "unbound-host",
"binary_version": "1.4.22-1ubuntu4.14.04.3+esm2"
}
]
}{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libbind9-140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libdns-export162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libdns162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libirs-export141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libirs141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisc-export160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisc160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisccc-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisccc140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisccfg-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "libisccfg140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "liblwres141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "dnsmasq",
"binary_version": "2.90-0ubuntu0.16.04.1+esm1"
},
{
"binary_name": "dnsmasq-base",
"binary_version": "2.90-0ubuntu0.16.04.1+esm1"
},
{
"binary_name": "dnsmasq-base-lua",
"binary_version": "2.90-0ubuntu0.16.04.1+esm1"
},
{
"binary_name": "dnsmasq-utils",
"binary_version": "2.90-0ubuntu0.16.04.1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
},
{
"binary_name": "libunbound2",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
},
{
"binary_name": "python-unbound",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
},
{
"binary_name": "unbound",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
},
{
"binary_name": "unbound-host",
"binary_version": "1.5.8-1ubuntu1.1+esm2"
}
]
}{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libbind9-160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libdns-export1100",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libdns1100",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libirs-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libirs160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisc-export169",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisc169",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisccc-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisccc160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisccfg-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "libisccfg160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
},
{
"binary_name": "liblwres160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "dnsmasq",
"binary_version": "2.90-0ubuntu0.18.04.1+esm1"
},
{
"binary_name": "dnsmasq-base",
"binary_version": "2.90-0ubuntu0.18.04.1+esm1"
},
{
"binary_name": "dnsmasq-base-lua",
"binary_version": "2.90-0ubuntu0.18.04.1+esm1"
},
{
"binary_name": "dnsmasq-utils",
"binary_version": "2.90-0ubuntu0.18.04.1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "libunbound2",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "python-unbound",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "unbound",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
},
{
"binary_name": "unbound-host",
"binary_version": "1.6.7-1ubuntu2.6+esm3"
}
]
}{
"binaries": [
{
"binary_name": "knot-resolver",
"binary_version": "2.1.1-1ubuntu0.1~esm2"
},
{
"binary_name": "knot-resolver-module-http",
"binary_version": "2.1.1-1ubuntu0.1~esm2"
},
{
"binary_name": "libkres-dev",
"binary_version": "2.1.1-1ubuntu0.1~esm2"
},
{
"binary_name": "libkres6",
"binary_version": "2.1.1-1ubuntu0.1~esm2"
}
]
}