6.4
CVE-2010-3614
- EPSS 16.92%
- Veröffentlicht 06.12.2010 13:44:54
- Zuletzt bearbeitet 16.06.2026 23:23:08
- Quelle cret@cert.org
- CVE-Watchlists
- Unerledigt
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 16.92% | 0.967 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://support.apple.com/kb/HT5002
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://www.securityfocus.com/archive/1/516909/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2011-0004.html
http://www.vupen.com/english/advisories/2011/0606
http://support.avaya.com/css/P8/documents/100124923
http://www.debian.org/security/2010/dsa-2130
http://www.mandriva.com/security/advisories?name=MDVSA-2010:253
http://www.redhat.com/support/errata/RHSA-2010-0976.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html
http://secunia.com/advisories/42459
http://secunia.com/advisories/42522
http://secunia.com/advisories/42671
http://securitytracker.com/id?1024817
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories
http://www.redhat.com/support/errata/RHSA-2010-0975.html
http://www.ubuntu.com/usn/USN-1025-1
http://www.vupen.com/english/advisories/2010/3102
http://www.vupen.com/english/advisories/2010/3103
http://www.vupen.com/english/advisories/2010/3138
http://www.vupen.com/english/advisories/2010/3139
http://www.vupen.com/english/advisories/2010/3140
http://secunia.com/advisories/42435
http://www.isc.org/software/bind/advisories/cve-2010-3614
http://www.kb.cert.org/vuls/id/837744
http://www.osvdb.org/69559
http://www.securityfocus.com/bid/45137