2.6

CVE-2010-0213

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version9.7.1
Isc ≫ Bind Version9.7.1 Updatep1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.52% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.html
http://secunia.com/advisories/40652
Vendor Advisory
http://secunia.com/advisories/40709
Vendor Advisory
http://www.isc.org/software/bind/advisories/cve-2010-0213
Vendor Advisory
http://www.kb.cert.org/vuls/id/211905
US Government Resource
http://www.securityfocus.com/bid/41730
http://www.securitytracker.com/id?1024217
http://www.vupen.com/english/advisories/2010/1884
Vendor Advisory