CVE Vulnerabilities

CVE-2010-3613

Published: Dec 06, 2010 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
4 IMPORTANT
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Affected Software

Name Vendor Start Version End Version
Bind Isc 9.6 (including) 9.6 (including)
Bind Isc 9.6-r1 (including) 9.6-r1 (including)
Bind Isc 9.6-r2 (including) 9.6-r2 (including)
Bind Isc 9.6.2 (including) 9.6.2 (including)
Bind Isc 9.6.2-b1 (including) 9.6.2-b1 (including)
Bind Isc 9.6.2-p1 (including) 9.6.2-p1 (including)
Bind Isc 9.6.2-p2 (including) 9.6.2-p2 (including)
Bind Isc 9.7.0 (including) 9.7.0 (including)
Bind Isc 9.7.0-a1 (including) 9.7.0-a1 (including)
Bind Isc 9.7.0-a2 (including) 9.7.0-a2 (including)
Bind Isc 9.7.0-a3 (including) 9.7.0-a3 (including)
Bind Isc 9.7.0-b1 (including) 9.7.0-b1 (including)
Bind Isc 9.7.0-b2 (including) 9.7.0-b2 (including)
Bind Isc 9.7.0-b3 (including) 9.7.0-b3 (including)
Bind Isc 9.7.0-p1 (including) 9.7.0-p1 (including)
Bind Isc 9.7.0-p2 (including) 9.7.0-p2 (including)
Bind Isc 9.7.0-rc1 (including) 9.7.0-rc1 (including)
Bind Isc 9.7.0-rc2 (including) 9.7.0-rc2 (including)
Bind Isc 9.7.1 (including) 9.7.1 (including)
Bind Isc 9.7.1-b1 (including) 9.7.1-b1 (including)
Bind Isc 9.7.1-p1 (including) 9.7.1-p1 (including)
Bind Isc 9.7.1-p2 (including) 9.7.1-p2 (including)
Bind Isc 9.7.1-rc1 (including) 9.7.1-rc1 (including)
Bind Isc 9.7.2 (including) 9.7.2 (including)
Bind Isc 9.7.2-p1 (including) 9.7.2-p1 (including)
Bind Isc 9.7.2-p2 (including) 9.7.2-p2 (including)
Red Hat Enterprise Linux 4 RedHat bind-20:9.2.4-30.el4_8.6 *
Red Hat Enterprise Linux 5 RedHat bind-30:9.3.6-4.P1.el5_5.3 *
Red Hat Enterprise Linux 6 RedHat bind-32:9.7.0-5.P2.el6_0.1 *
Bind9 Ubuntu dapper *
Bind9 Ubuntu devel *
Bind9 Ubuntu hardy *
Bind9 Ubuntu karmic *
Bind9 Ubuntu lucid *
Bind9 Ubuntu maverick *
Bind9 Ubuntu upstream *

References