[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-3613Date: (C)2010-12-06   (M)2023-12-22


named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.0
Exploit Score: 8.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1024817
http://www.securityfocus.com/archive/1/516909/100/0/threaded
SECUNIA-42374
SECUNIA-42459
SECUNIA-42522
SECUNIA-42671
SECUNIA-42707
SECUNIA-43141
BID-45133
OSVDB-69558
ADV-2010-3102
ADV-2010-3103
ADV-2010-3138
ADV-2010-3139
ADV-2010-3140
ADV-2011-0267
ADV-2011-0606
APPLE-SA-2011-10-12-3
DSA-2130
FEDORA-2010-18469
FEDORA-2010-18521
HPSBUX02655
MDVSA-2010:253
NetBSD-SA2011-001
RHSA-2010:0975
RHSA-2010:0976
RHSA-2010:1000
SSA:2010-350-01
USN-1025-1
VU#706148
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://support.apple.com/kb/HT5002
http://support.avaya.com/css/P8/documents/100124923
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories
http://www.isc.org/software/bind/advisories/cve-2010-3613
http://www.vmware.com/security/advisories/VMSA-2011-0004.html
oval:org.mitre.oval:def:12601

CPE    26
cpe:/a:isc:bind:9.7.0:p1
cpe:/a:isc:bind:9.7.2:p2
cpe:/a:isc:bind:9.7.0:p2
cpe:/a:isc:bind:9.7.2:p1
...
CWE    1
CWE-264
OVAL    17
oval:org.secpod.oval:def:3115
oval:org.secpod.oval:def:500430
oval:org.secpod.oval:def:1503311
oval:org.secpod.oval:def:500378
...

© SecPod Technologies