CVE-2010-3613

Published: Dec 6, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Affected (26)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.6.2
Isc Bind	Version 9.6.2 b1
Isc Bind	Version 9.6.2 p1
Isc Bind	Version 9.6.2 p2
Isc Bind	Version 9.6
Isc Bind	Version 9.6 r1
Isc Bind	Version 9.6 r2
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.0 a1
Isc Bind	Version 9.7.0 a2
Isc Bind	Version 9.7.0 a3
Isc Bind	Version 9.7.0 b1
Isc Bind	Version 9.7.0 b2
Isc Bind	Version 9.7.0 b3
Isc Bind	Version 9.7.0 p1
Isc Bind	Version 9.7.0 p2
Isc Bind	Version 9.7.0 rc1
Isc Bind	Version 9.7.0 rc2
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.1 b1
Isc Bind	Version 9.7.1 p1
Isc Bind	Version 9.7.1 p2
Isc Bind	Version 9.7.1 rc1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.2 p1
Isc Bind	Version 9.7.2 p2

Related CWEs

CWE-264

References (74)

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc

Source: cret@cert.org

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Source: cret@cert.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html

Source: cret@cert.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html

Source: cret@cert.org

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: cret@cert.org

http://marc.info/?l=bugtraq&m=130270720601677&w=2

Source: cret@cert.org

http://secunia.com/advisories/42374

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42459

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42522

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42671

Source: cret@cert.org

http://secunia.com/advisories/42707

Source: cret@cert.org

http://secunia.com/advisories/43141

Source: cret@cert.org

http://securitytracker.com/id?1024817

Source: cret@cert.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190

Source: cret@cert.org

http://support.apple.com/kb/HT5002

Source: cret@cert.org

http://support.avaya.com/css/P8/documents/100124923

Source: cret@cert.org

http://www.debian.org/security/2010/dsa-2130

Source: cret@cert.org

http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

Source: cret@cert.org

http://www.isc.org/software/bind/advisories/cve-2010-3613

Source: cret@cert.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/706148

Source: cret@cert.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:253

Source: cret@cert.org

http://www.osvdb.org/69558

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2010-0975.html

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2010-0976.html

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2010-1000.html

Source: cret@cert.org

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: cret@cert.org

http://www.securityfocus.com/bid/45133

Source: cret@cert.org

http://www.ubuntu.com/usn/USN-1025-1

Source: cret@cert.org

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: cret@cert.org

http://www.vupen.com/english/advisories/2010/3102

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3103

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3138

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3139

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3140

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0267

Source: cret@cert.org

http://www.vupen.com/english/advisories/2011/0606

Source: cret@cert.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12601

Source: cret@cert.org

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc