Vulnerability in Isc Bind
CVE-2010-0213
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.
Affected products
- Isc Bind — versions 9.7.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vendor-advisory, x_refsource_SUSE)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (x_refsource_CERT-VN, US Government Resource, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cret@cert.org (vendor-advisory, x_refsource_FEDORA)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)