ISC BIND cache vulnerability

Overview

The ISC BIND nameserver contains a vulnerability that could allow a remote attacker to cause a denial of service.

Description

According to ISC:

Adding certain types of signed negative responses to cache doesn’t clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash (INSIST).

---

Impact

A remote attacker could cause the name server on an affected system to crash. ISC notes that this vulnerability affects recursive nameservers irrespective of whether DNSSEC validation is enabled or disabled.

---

Solution

**Apply an update

Users who obtain BIND from a third-party vendor, such as their operating system vendor, should see the vendor information portion of this document for a partial list of affected vendors. **
This vulnerability is addressed in ISC BIND versions 9.4-ESV-R4, 9.6.2-P3, 9.6-ESV-R3, and 9.7.2-P3. Users of BIND from the original source distribution should upgrade to one of these versions, as appropriate.

See also <https://www.isc.org/software/bind/advisories/cve-2010-3613&gt;

---

Vendor Information

706148

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Internet Systems Consortium Affected

Updated: December 01, 2010

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

• <https://www.isc.org/software/bind/advisories/cve-2010-3613&gt;
• <http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories&gt;

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <https://www.isc.org/software/bind/advisories/cve-2010-3613&gt;
• <http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories&gt;

Acknowledgements

Thanks to Internet Systems Consortium for reporting this vulnerability.

This document was written by Michael Orlando.

Other Information

CVE IDs:	CVE-2010-3613
Severity Metric:	7.65 Date Public: