'KeyTrap' DNS Bug Threatens Widespread Internet Outages

Researchers at ATHENE disclosed "KeyTrap" (CVE-2023-50387), a DNSSEC design flaw that can induce algorithmic complexity attacks causing DNS resolvers — including widely deployed BIND 9 — to enter resource-consuming resolution loops and stall, potentially producing widespread Internet outages; vendors and major DNS providers have released temporary patches and ISC recommends installing patched BIND versions, while the research team works on a permanent redesign and no active exploitation has been observed so far.