CVE Vulnerabilities

CVE-2010-3613

Published: Dec 06, 2010 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Affected Software

Name Vendor Start Version End Version
Bind Isc 9.6 (including) 9.6 (including)
Bind Isc 9.6-r1 (including) 9.6-r1 (including)
Bind Isc 9.6-r2 (including) 9.6-r2 (including)
Bind Isc 9.6.2 (including) 9.6.2 (including)
Bind Isc 9.6.2-b1 (including) 9.6.2-b1 (including)
Bind Isc 9.6.2-p1 (including) 9.6.2-p1 (including)
Bind Isc 9.6.2-p2 (including) 9.6.2-p2 (including)
Bind Isc 9.7.0 (including) 9.7.0 (including)
Bind Isc 9.7.0-a1 (including) 9.7.0-a1 (including)
Bind Isc 9.7.0-a2 (including) 9.7.0-a2 (including)
Bind Isc 9.7.0-a3 (including) 9.7.0-a3 (including)
Bind Isc 9.7.0-b1 (including) 9.7.0-b1 (including)
Bind Isc 9.7.0-b2 (including) 9.7.0-b2 (including)
Bind Isc 9.7.0-b3 (including) 9.7.0-b3 (including)
Bind Isc 9.7.0-p1 (including) 9.7.0-p1 (including)
Bind Isc 9.7.0-p2 (including) 9.7.0-p2 (including)
Bind Isc 9.7.0-rc1 (including) 9.7.0-rc1 (including)
Bind Isc 9.7.0-rc2 (including) 9.7.0-rc2 (including)
Bind Isc 9.7.1 (including) 9.7.1 (including)
Bind Isc 9.7.1-b1 (including) 9.7.1-b1 (including)
Bind Isc 9.7.1-p1 (including) 9.7.1-p1 (including)
Bind Isc 9.7.1-p2 (including) 9.7.1-p2 (including)
Bind Isc 9.7.1-rc1 (including) 9.7.1-rc1 (including)
Bind Isc 9.7.2 (including) 9.7.2 (including)
Bind Isc 9.7.2-p1 (including) 9.7.2-p1 (including)
Bind Isc 9.7.2-p2 (including) 9.7.2-p2 (including)

References