Vulnerability in Isc Bind
CVE-2010-3613
named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
EPSS: 0.091 (94.8th percentile) — read the EPSS interpretation.
Affected products
- Isc Bind — versions 9.6, 9.7.1, 9.7.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (mailing-list, x_refsource_MLIST)
- cret@cert.org (signature, x_refsource_OVAL, vdb-entry)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)