National Cyber Awareness System

Vulnerability Summary for CVE-2010-3613

Overview

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#706148

Name: VU#706148

Hyperlink:http://www.kb.cert.org/vuls/id/706148

External Source: VUPEN

Name: ADV-2011-0606

Hyperlink:http://www.vupen.com/english/advisories/2011/0606

External Source: VUPEN

Name: ADV-2011-0267

Hyperlink:http://www.vupen.com/english/advisories/2011/0267

External Source: VUPEN

Name: ADV-2010-3140

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3140

External Source: VUPEN

Name: ADV-2010-3139

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3139

External Source: VUPEN

Name: ADV-2010-3138

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3138

External Source: VUPEN

Name: ADV-2010-3103

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3103

External Source: VUPEN

Name: ADV-2010-3102

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3102

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2011-0004.html

External Source: UBUNTU

Name: USN-1025-1

Hyperlink:http://www.ubuntu.com/usn/USN-1025-1

External Source: BID

Name: 45133

Hyperlink:http://www.securityfocus.com/bid/45133

External Source: BUGTRAQ

Name: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/516909/100/0/threaded

External Source: REDHAT

Name: RHSA-2010:1000

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-1000.html

External Source: REDHAT

Name: RHSA-2010:0976

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0976.html

External Source: REDHAT

Name: RHSA-2010:0975

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0975.html

External Source: OSVDB

Name: 69558

Hyperlink:http://www.osvdb.org/69558

External Source: MANDRIVA

Name: MDVSA-2010:253

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:253

External Source: CONFIRM

Name: http://www.isc.org/software/bind/advisories/cve-2010-3613

Type: Advisory

Hyperlink:http://www.isc.org/software/bind/advisories/cve-2010-3613

External Source: CONFIRM

Name: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

Hyperlink:http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

External Source: DEBIAN

Name: DSA-2130

Hyperlink:http://www.debian.org/security/2010/dsa-2130

External Source: CONFIRM

Name: http://support.avaya.com/css/P8/documents/100124923

Hyperlink:http://support.avaya.com/css/P8/documents/100124923

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5002

Hyperlink:http://support.apple.com/kb/HT5002

External Source: SLACKWARE

Name: SSA:2010-350-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190

External Source: SECTRACK

Name: 1024817

Hyperlink:http://securitytracker.com/id?1024817

External Source: SECUNIA

Name: 43141

Hyperlink:http://secunia.com/advisories/43141

External Source: SECUNIA

Name: 42707

Hyperlink:http://secunia.com/advisories/42707

External Source: SECUNIA

Name: 42671

Hyperlink:http://secunia.com/advisories/42671

External Source: SECUNIA

Name: 42522

Type: Advisory

Hyperlink:http://secunia.com/advisories/42522

External Source: SECUNIA

Name: 42459

Type: Advisory

Hyperlink:http://secunia.com/advisories/42459

External Source: SECUNIA

Name: 42374

Type: Advisory

Hyperlink:http://secunia.com/advisories/42374

External Source: OVAL

Name: oval:org.mitre.oval:def:12601

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12601

External Source: MLIST

Name: [security-announce] 20110307 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2011/000126.html

External Source: FEDORA

Name: FEDORA-2010-18469

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html

External Source: FEDORA

Name: FEDORA-2010-18521

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-3

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

External Source: NETBSD

Name: NetBSD-SA2011-001

Hyperlink:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:12601

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12601