CVE-2010-3614

Published: Dec 6, 2010Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.

Affected (236)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

236 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.0 rc1
Isc Bind	Version 9.0.0 rc2
Isc Bind	Version 9.0.0 rc3
Isc Bind	Version 9.0.0 rc4
Isc Bind	Version 9.0.0 rc5
Isc Bind	Version 9.0.0 rc6
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0.1 rc1
Isc Bind	Version 9.0.1 rc2
Isc Bind	Version 9.0
Isc Bind	Version 9.1.0 rc1
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.1 rc1
Isc Bind	Version 9.1.1 rc2
Isc Bind	Version 9.1.1 rc3
Isc Bind	Version 9.1.1 rc4
Isc Bind	Version 9.1.1 rc5
Isc Bind	Version 9.1.1 rc6
Isc Bind	Version 9.1.1 rc7
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.2 rc1
Isc Bind	Version 9.1.3
Isc Bind	Version 9.1.3 rc1
Isc Bind	Version 9.1.3 rc2
Isc Bind	Version 9.1.3 rc3
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.0 a1
Isc Bind	Version 9.2.0 a2
Isc Bind	Version 9.2.0 a3
Isc Bind	Version 9.2.0 b1
Isc Bind	Version 9.2.0 b2
Isc Bind	Version 9.2.0 rc10
Isc Bind	Version 9.2.0 rc1
Isc Bind	Version 9.2.0 rc2
Isc Bind	Version 9.2.0 rc3
Isc Bind	Version 9.2.0 rc4
Isc Bind	Version 9.2.0 rc5
Isc Bind	Version 9.2.0 rc6
Isc Bind	Version 9.2.0 rc7
Isc Bind	Version 9.2.0 rc8
Isc Bind	Version 9.2.0 rc9
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.1 rc1
Isc Bind	Version 9.2.1 rc2
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.2 rc1
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.3 rc1
Isc Bind	Version 9.2.3 rc2
Isc Bind	Version 9.2.3 rc3
Isc Bind	Version 9.2.3 rc4
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.4 rc2
Isc Bind	Version 9.2.4 rc3
Isc Bind	Version 9.2.4 rc4
Isc Bind	Version 9.2.4 rc5
Isc Bind	Version 9.2.4 rc6
Isc Bind	Version 9.2.4 rc7
Isc Bind	Version 9.2.4 rc8
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.5 b2
Isc Bind	Version 9.2.5 rc1
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.6 rc1
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2.7 rc1
Isc Bind	Version 9.2.7 rc2
Isc Bind	Version 9.2.7 rc3
Isc Bind	Version 9.2.8
Isc Bind	Version 9.2.9
Isc Bind	Version 9.2.9 rc1
Isc Bind	Version 9.2
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.0 b2
Isc Bind	Version 9.3.0 b3
Isc Bind	Version 9.3.0 b4
Isc Bind	Version 9.3.0 rc1
Isc Bind	Version 9.3.0 rc2
Isc Bind	Version 9.3.0 rc3
Isc Bind	Version 9.3.0 rc4
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.1 b2
Isc Bind	Version 9.3.1 rc1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.2 rc1
Isc Bind	Version 9.3.3
Isc Bind	Version 9.3.3 rc1
Isc Bind	Version 9.3.3 rc2
Isc Bind	Version 9.3.3 rc3
Isc Bind	Version 9.3.4
Isc Bind	Version 9.3.5
Isc Bind	Version 9.3.5 rc1
Isc Bind	Version 9.3.5 rc2
Isc Bind	Version 9.3.6
Isc Bind	Version 9.3.6 rc1
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.0 a1
Isc Bind	Version 9.4.0 a2
Isc Bind	Version 9.4.0 a3
Isc Bind	Version 9.4.0 a4
Isc Bind	Version 9.4.0 a5
Isc Bind	Version 9.4.0 a6
Isc Bind	Version 9.4.0 b1
Isc Bind	Version 9.4.0 b2
Isc Bind	Version 9.4.0 b3
Isc Bind	Version 9.4.0 b4
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.4.0 rc2
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.2 rc1
Isc Bind	Version 9.4.2 rc2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4.3 b1
Isc Bind	Version 9.4.3 b2
Isc Bind	Version 9.4.3 b3
Isc Bind	Version 9.4.3 p2
Isc Bind	Version 9.4.3 rc1
Isc Bind	Version 9.4
Isc Bind	Version 9.4
Isc Bind	Version 9.4 b1
Isc Bind	Version 9.4 r1
Isc Bind	Version 9.4 r2
Isc Bind	Version 9.4 r3
Isc Bind	Version 9.4 r4-p1
Isc Bind	Version 9.4 r4
Isc Bind	Version 9.4 r5-b1
Isc Bind	Version 9.4 r5-p1
Isc Bind	Version 9.4 r5-rc1
Isc Bind	Version 9.4 r5
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.0 a1
Isc Bind	Version 9.5.0 a2
Isc Bind	Version 9.5.0 a3
Isc Bind	Version 9.5.0 a4
Isc Bind	Version 9.5.0 a5
Isc Bind	Version 9.5.0 a6
Isc Bind	Version 9.5.0 a7
Isc Bind	Version 9.5.0 b1
Isc Bind	Version 9.5.0 b2
Isc Bind	Version 9.5.0 b3
Isc Bind	Version 9.5.0 p1
Isc Bind	Version 9.5.0 p2
Isc Bind	Version 9.5.0 p2_w1
Isc Bind	Version 9.5.0 p2_w2
Isc Bind	Version 9.5.0 rc1
Isc Bind	Version 9.5.1
Isc Bind	Version 9.5.1 b1
Isc Bind	Version 9.5.1 b2
Isc Bind	Version 9.5.1 b3
Isc Bind	Version 9.5.1 rc1
Isc Bind	Version 9.5.1 rc2
Isc Bind	Version 9.5.2
Isc Bind	Version 9.5.2 b1
Isc Bind	Version 9.5.2 p1
Isc Bind	Version 9.5.2 p2
Isc Bind	Version 9.5.2 p3
Isc Bind	Version 9.5.2 p4
Isc Bind	Version 9.5.2 rc1
Isc Bind	Version 9.5.3 b1
Isc Bind	Version 9.5.3 rc1
Isc Bind	Version 9.5
Isc Bind	Version 9.6.0
Isc Bind	Version 9.6.0 a1
Isc Bind	Version 9.6.0 b1
Isc Bind	Version 9.6.0 p1
Isc Bind	Version 9.6.0 rc1
Isc Bind	Version 9.6.0 rc2
Isc Bind	Version 9.6.1
Isc Bind	Version 9.6.1 b1
Isc Bind	Version 9.6.1 p1
Isc Bind	Version 9.6.1 p2
Isc Bind	Version 9.6.1 p3
Isc Bind	Version 9.6.1 rc1
Isc Bind	Version 9.6.2
Isc Bind	Version 9.6.2 b1
Isc Bind	Version 9.6.2 p1
Isc Bind	Version 9.6.2 p2
Isc Bind	Version 9.6
Isc Bind	Version 9.6 r1
Isc Bind	Version 9.6 r2
Isc Bind	Version 9.6 r3
Isc Bind	Version 9.6 r4
Isc Bind	Version 9.6 r4_p1
Isc Bind	Version 9.6 r5
Isc Bind	Version 9.6 r5_b1
Isc Bind	Version 9.6 r5_p1
Isc Bind	Version 9.6 r6
Isc Bind	Version 9.6 r6_b1
Isc Bind	Version 9.6 r6_rc1
Isc Bind	Version 9.6 r6_rc2
Isc Bind	Version 9.6 r7
Isc Bind	Version 9.6 r7_p1
Isc Bind	Version 9.6 r7_p2
Isc Bind	Version 9.6 r9
Isc Bind	Version 9.6 r9_p1
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.0 a1
Isc Bind	Version 9.7.0 a2
Isc Bind	Version 9.7.0 a3
Isc Bind	Version 9.7.0 b1
Isc Bind	Version 9.7.0 b2
Isc Bind	Version 9.7.0 b3
Isc Bind	Version 9.7.0 p1
Isc Bind	Version 9.7.0 p2
Isc Bind	Version 9.7.0 rc1
Isc Bind	Version 9.7.0 rc2
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.1 b1
Isc Bind	Version 9.7.1 p1
Isc Bind	Version 9.7.1 p2
Isc Bind	Version 9.7.1 rc1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.2 p1
Isc Bind	Version 9.7.2 p2
Isc Bind	Version 9.7.2 p3
Isc Bind	Version 9.7.2 rc1
Isc Bind	Version 9.7.3
Isc Bind	Version 9.7.3 b1
Isc Bind	Version 9.7.3 p1
Isc Bind	Version 9.7.3 rc1
Isc Bind	Version 9.7.4
Isc Bind	Version 9.7.4 b1
Isc Bind	Version 9.7.4 p1
Isc Bind	Version 9.7.4 rc1
Isc Bind	Version 9.7.5
Isc Bind	Version 9.7.5 b1
Isc Bind	Version 9.7.5 rc1
Isc Bind	Version 9.7.5 rc2
Isc Bind	Version 9.7.6
Isc Bind	Version 9.7.6 p1
Isc Bind	Version 9.7.6 p2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (60)

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Source: cret@cert.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html

Source: cret@cert.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html

Source: cret@cert.org

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: cret@cert.org

http://secunia.com/advisories/42435

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42459

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42522

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/42671

Source: cret@cert.org

http://securitytracker.com/id?1024817

Source: cret@cert.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190

Source: cret@cert.org

http://support.apple.com/kb/HT5002

Source: cret@cert.org

http://support.avaya.com/css/P8/documents/100124923

Source: cret@cert.org

http://www.debian.org/security/2010/dsa-2130

Source: cret@cert.org

http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

Source: cret@cert.org

http://www.isc.org/software/bind/advisories/cve-2010-3614

Source: cret@cert.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/837744

Source: cret@cert.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:253

Source: cret@cert.org

http://www.osvdb.org/69559

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2010-0975.html

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2010-0976.html

Source: cret@cert.org

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: cret@cert.org

http://www.securityfocus.com/bid/45137

Source: cret@cert.org

http://www.ubuntu.com/usn/USN-1025-1

Source: cret@cert.org

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: cret@cert.org

http://www.vupen.com/english/advisories/2010/3102

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3103

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3138

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3139

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3140

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0606

Source: cret@cert.org

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html