Overview
The ISC BIND nameserver contains a vulnerability that could allow a remote attacker to cause a denial of service.
Description
According to ISC: Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash (INSIST). |
Impact
A remote attacker could cause the name server on an affected system to crash. ISC notes that this vulnerability affects recursive nameservers irrespective of whether DNSSEC validation is enabled or disabled. |
Solution
Apply an update |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Internet Systems Consortium for reporting this vulnerability.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2010-3613 |
| Severity Metric: | 7.65 |
| Date Public: | 2010-12-01 |
| Date First Published: | 2010-12-01 |
| Date Last Updated: | 2010-12-16 14:02 UTC |
| Document Revision: | 23 |