PT-2010-2018 · Isc+1 · Bind+1

Published 2010-07-27 · Updated 2016-04-04 · CVE-2010-0213

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BIND versions 9.7.1 through 9.7.1-P1

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This occurs when a recursive validating server has a trust anchor configured statically or via DNSSEC Lookaside Validation (DLV), and it receives a query for an RRSIG record whose answer is not in the cache. As a result, the server repeatedly sends RRSIG queries to the authoritative servers.

Recommendations For BIND versions 9.7.1 through 9.7.1-P1, consider disabling DNSSEC Lookaside Validation (DLV) as a temporary workaround to minimize the risk of exploitation. Restrict access to RRSIG records to prevent infinite loop scenarios until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2010-0213

Affected Products

Bind

Bind Server

References · 13

• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html · Vendor Advisory
• http://isc.org/software/bind/advisories/cve-2010-0213 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1884 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0213 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0213 · Security Note
• http://secunia.com/advisories/40709 · Vendor Advisory
• http://secunia.com/advisories/40652 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0213 · Vendor Advisory
• http://kb.cert.org/vuls/id/211905 · Note
• http://securityfocus.com/bid/41730 · Note
• http://securitytracker.com/id?1024217 · Note