Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-0382HistoryJan 22, 2010 - 10:00 p.m.
CVE-2010-0382
2010-01-2222:00:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.04 Low
EPSS
Percentile
91.9%
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bind9 | <Β 1:9.7.0.dfsg-1 | bind9_1:9.7.0.dfsg-1_all.deb |
| Debian | 11 | all | bind9 | <Β 1:9.7.0.dfsg-1 | bind9_1:9.7.0.dfsg-1_all.deb |
| Debian | 10 | all | bind9 | <Β 1:9.7.0.dfsg-1 | bind9_1:9.7.0.dfsg-1_all.deb |
| Debian | 999 | all | bind9 | <Β 1:9.7.0.dfsg-1 | bind9_1:9.7.0.dfsg-1_all.deb |
| Debian | 13 | all | bind9 | <Β 1:9.7.0.dfsg-1 | bind9_1:9.7.0.dfsg-1_all.deb |
Related
f5
f5
K15787 : BIND vulnerability CVE-2010-0382
2014-11-03 00:00:00
SOL15787 - BIND vulnerability CVE-2010-0382
2014-11-03 00:00:00
K10898 : DNSSEC BIND vulnerability - CVE-2009-4022
2013-07-03 00:00:00
nessus
nessus
ISC BIND 9 DNSSEC Cache Poisoning
2009-12-02 00:00:00
F5 Networks BIG-IP : BIND vulnerability (SOL15787)
2014-11-04 00:00:00
Oracle Linux 5 : bind (ELSA-2010-0062)
2013-07-12 00:00:00
prion
prion
Code injection
2010-01-22 22:00:00
Design/Logic Flaw
2009-11-25 16:30:00
Design/Logic Flaw
2010-01-22 22:00:00
cve
cve
ubuntucve
ubuntucve
securityvulns
securityvulns
bind DNS server cache poisoning
2010-03-17 00:00:00
rPSA-2010-0018-1 bind bind-utils caching-nameserver
2010-03-17 00:00:00
[ MDVSA-2009:304 ] bind
2009-12-01 00:00:00
openvas
openvas
HP-UX Update for BIND HPSBUX02546
2010-10-01 00:00:00
HP-UX Update for BIND HPSBUX02546
2010-10-01 00:00:00
Gentoo Security Advisory GLSA 201006-11 (BIND)
2011-03-09 00:00:00
redhat
redhat
(RHSA-2010:0062) Moderate: bind security update
2010-01-20 00:00:00
(RHSA-2009:1620) Moderate: bind security update
2009-11-30 00:00:00
centos
centos
bind, caching security update
2010-01-20 17:59:57
bind, caching security update
2009-12-17 12:39:21
oraclelinux
oraclelinux
bind security update
2010-01-20 00:00:00
bind security update
2009-11-30 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2010-06-01 00:00:00
osv
osv
bind9 - cache poisoning
2009-12-23 00:00:00
bind9 - cache poisoning
2010-06-04 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: bind-9.6.1-13.P2.fc12
2009-11-27 21:43:51
[SECURITY] Fedora 12 Update: bind-9.6.1-15.P3.fc12
2010-01-21 00:14:47
[SECURITY] Fedora 11 Update: bind-9.6.1-7.P2.fc11
2009-11-27 21:40:17
debian
debian
[SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning
2009-12-23 07:07:33
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
2010-06-15 20:05:57
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
2010-06-04 19:22:30
veracode
veracode
Cache Poisoning Attack
2020-04-10 00:41:27
Cache Poisoning Attack
2020-04-10 00:41:38
cert
cert
BIND DNS Nameserver, DNSSEC validation Vulnerability
2009-12-01 00:00:00
checkpoint_security
checkpoint_security
seebug
seebug
ISC BIND 9 DNSSECζ₯θ―’εεΊθΏη¨ηΌεδΈζ―ζΌζ΄
2009-11-27 00:00:00
ubuntu
ubuntu
Bind vulnerability
2009-12-07 00:00:00
Bind vulnerabilities
2010-01-20 00:00:00
suse
suse
DNSSEC cache poisoning in bind
2009-12-02 11:21:35
remote code execution in acroread
2010-01-26 16:40:23
slackware
slackware
bind
2009-12-02 17:30:47
[slackware-security] bind
2010-06-25 18:32:41
debiancve
debiancve
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0290
2010-01-22 22:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:01.bind
2010-01-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 9 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 7 package bind version 9.3.6-alt7
2011-12-16 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.04 Low
EPSS
Percentile
91.9%
Related for DEBIANCVE:CVE-2010-0382