CVE-2010-0213
published 2010-07-28CVE-2010-0213: BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows…
PriorityP414low2.6CVSS 2.0
AVNACHAuNCNINAP
EPSS
6.52%
93.1th percentile
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | bind9 | < bind9 9.7.1.dfsg.P2 (bookworm) | bind9 9.7.1.dfsg.P2 (bookworm) |
| isc | bind | — | — |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
CVSS provenance
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
osv2.6LOW
vendor_debian2.6LOW
vendor_redhat2.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2p9p-xfg3-2fr3: BIND 9
ghsa_unreviewed·2022-05-02
CVE-2010-0213 [LOW] GHSA-2p9p-xfg3-2fr3: BIND 9
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
OSV
CVE-2010-0213: BIND 9
osv·2010-07-28·CVSS 2.6
CVE-2010-0213 [LOW] CVE-2010-0213: BIND 9
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Red Hat
BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query
vendor_redhat·2010-07-15·CVSS 2.6
CVE-2010-0213 [LOW] CWE-835 BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query
BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Statement: Not vulnerable. This issue did not affect the versions of the bind as shipped with Red Hat Enterprise Linux 3, 4, or 5.
Package: bind (Red Hat Enterprise Linux 4) - Not affected
Package: bind (Red Hat Enterprise Linux 5) - Not affected
Package: bind (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2010-0213: bind9 - BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor t...
vendor_debian·2010·CVSS 2.6
CVE-2010-0213 [LOW] CVE-2010-0213: bind9 - BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor t...
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Scope: local
bookworm: resolved (fixed in 9.7.1.dfsg.P2)
bullseye: resolved (fixed in 9.7.1.dfsg.P2)
forky: resolved (fixed in 9.7.1.dfsg.P2)
sid: resolved (fixed in 9.7.1.dfsg.P2)
trixie: resolved (fixed in 9.7.1.dfsg.P2)
No detection rules found.
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlhttp://secunia.com/advisories/40652http://secunia.com/advisories/40709http://www.isc.org/software/bind/advisories/cve-2010-0213http://www.kb.cert.org/vuls/id/211905http://www.securityfocus.com/bid/41730http://www.securitytracker.com/id?1024217http://www.vupen.com/english/advisories/2010/1884http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlhttp://secunia.com/advisories/40652http://secunia.com/advisories/40709http://www.isc.org/software/bind/advisories/cve-2010-0213http://www.kb.cert.org/vuls/id/211905http://www.securityfocus.com/bid/41730http://www.securitytracker.com/id?1024217http://www.vupen.com/english/advisories/2010/1884
2010-07-28
Published