CVE-2010-3614

2010-12-0100:00:00

ubuntu.com

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

JSON

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV
before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly
determine the security status of an NS RRset during a DNSKEY algorithm
rollover, which might allow remote attackers to cause a denial of service
(DNSSEC validation error) by triggering a rollover.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchbind9< 1:9.3.2-2ubuntu1.12UNKNOWN
ubuntu8.04noarchbind9< 1:9.4.2.dfsg.P2-2ubuntu0.6UNKNOWN
ubuntu9.10noarchbind9< 1:9.6.1.dfsg.P1-3ubuntu0.4UNKNOWN
ubuntu10.04noarchbind9< 1:9.7.0.dfsg.P1-1ubuntu0.1UNKNOWN
ubuntu10.10noarchbind9< 1:9.7.1.dfsg.P2-2ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	bind9	< 1:9.3.2-2ubuntu1.12	UNKNOWN
ubuntu	8.04	noarch	bind9	< 1:9.4.2.dfsg.P2-2ubuntu0.6	UNKNOWN
ubuntu	9.10	noarch	bind9	< 1:9.6.1.dfsg.P1-3ubuntu0.4	UNKNOWN
ubuntu	10.04	noarch	bind9	< 1:9.7.0.dfsg.P1-1ubuntu0.1	UNKNOWN
ubuntu	10.10	noarch	bind9	< 1:9.7.1.dfsg.P2-2ubuntu0.1	UNKNOWN