CVE-2010-0213
published 2010-07-28CVE-2010-0213: BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows…
low2.6CVSS 3.1
AVNACHAuNCNINAP
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | bind9 | < bind9 9.7.1.dfsg.P2 (bookworm) | bind9 9.7.1.dfsg.P2 (bookworm) |
| isc | bind | — | — |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
| isc | bind9 | >= 0 < 9.7.1.dfsg.P2 | 9.7.1.dfsg.P2 |
CVSS provenance
nvd2.6LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
osv2.6LOW