CVE-2010-0382: High severity ISC BIND vulnerability

Published Jan 22, 2010

Updated

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.

Affected Software

168 affected components

ISC BIND=9.10.0-a1

ISC BIND=9.10.2-rc2

ISC BIND=9.6.1-p2

ISC BIND=9.2.0-rc7

ISC BIND=9.1.1-rc6

ISC BIND=9.3.1-rc1

ISC BIND=9.10.2-b1

ISC BIND=9.1.1

ISC BIND=9.4.3-b1

ISC BIND=9.2.3-rc2

ISC BIND=9.1.3

ISC BIND=9.4.3-b2

ISC BIND=9.6.1-rc1

ISC BIND=9.1.1-rc1

ISC BIND=9.1.3-rc3

ISC BIND=9.10.1-p2

ISC BIND=9.4.0-b2

ISC BIND=9.10.2-p3

ISC BIND=9.3.5

ISC BIND=9.2.0-b2

ISC BIND=9.7.0-b1

ISC BIND=9.10.2-p2

ISC BIND=9.3.2-rc1

ISC BIND=9.10.0

ISC BIND=9.2.0-a3

ISC BIND=9.2.3-rc4

ISC BIND=9.10.3-p1

ISC BIND=9.2.8

ISC BIND=9.2

ISC BIND=9.3.0-rc4

ISC BIND=9.2.4-rc8

ISC BIND=9.2.1-rc1

ISC BIND=9.3.0-rc2

ISC BIND=9.0.0-rc2

ISC BIND=9.6.1

ISC BIND=9.4.0-a4

ISC BIND=9.3

ISC BIND=9.3.4

ISC BIND=9.3.0-b2

ISC BIND=9.1.0-rc1

ISC BIND=9.2.7-rc1

ISC BIND=9.0.0-rc1

ISC BIND=9.4.3-p1

ISC BIND=9.10.0-b1

ISC BIND=9.2.5

ISC BIND=9.10.1-b2

ISC BIND=9.3.2

ISC BIND=9.1.1-rc5

ISC BIND=9.2.3-rc3

ISC BIND=9.2.0-rc2

ISC BIND=9.2.5-b2

ISC BIND=9.3.6-rc1

ISC BIND=9.3.6

ISC BIND=9.2.2

ISC BIND=9.10.0-rc2

ISC BIND=9.4.3-p2

ISC BIND=9.6.1-p1

ISC BIND=9.4.1

ISC BIND=9.2.0-rc9

ISC BIND=9.4.0-a3

ISC BIND=9.0.0-rc3

ISC BIND=9.10.1-rc2

ISC BIND=9.2.2-p2

ISC BIND=9.3.3-rc1

ISC BIND=9.2.4-rc6

ISC BIND=9.10.0-rc1

ISC BIND=9.10.2-p4

ISC BIND=9.3.0

ISC BIND=9.4.0-rc2

ISC BIND=9.3.0-b3

ISC BIND=9.3.5-rc2

ISC BIND=9.10.3-p3

ISC BIND=9.6.0-p1

ISC BIND=9.3.3-rc2

ISC BIND=9.2.4-rc7

ISC BIND=9.2.7-rc3

ISC BIND=9.1.3-rc2

ISC BIND=9.10.2-rc1

ISC BIND=9.10.3-rc1

ISC BIND=9.10.0-a2

ISC BIND=9.2.7

ISC BIND=9.4

ISC BIND=9.2.4

ISC BIND=9.2.5-rc1

ISC BIND=9.2.1

ISC BIND=9.1.2

ISC BIND=9.1.1-rc4

ISC BIND=9.4.3-p5

ISC BIND=9.4.2

ISC BIND=9.4.0-a2

ISC BIND=9.3.1

ISC BIND=9.4.3-b3

ISC BIND=9.2.0-rc4

ISC BIND=9.1.1-rc3

ISC BIND=9.1

ISC BIND=9.6.1-b1

ISC BIND=9.3.3-rc3

ISC BIND=9.2.1-rc2

ISC BIND=9.4.2-rc1

ISC BIND=9.4.0-b4

ISC BIND=9.4.0-b3

ISC BIND=9.10.0-p1

ISC BIND=9.2.4-rc2

ISC BIND=9.2.2-p3

ISC BIND=9.10.1-b1

ISC BIND=9.6.0-rc2

ISC BIND=9.2.9-rc1

ISC BIND=9.2.7-rc2

ISC BIND=9.4.3

ISC BIND=9.1.3-rc1

ISC BIND=9.10.0-p2

ISC BIND=9.2.2-rc1

ISC BIND=9.10.1

ISC BIND=9.10.1-rc1

ISC BIND=9.2.0-rc3

ISC BIND=9.2.0-rc8

ISC BIND=9.0.1-rc2

ISC BIND=9.2.4-rc3

ISC BIND=9.0.0-rc6

ISC BIND=9.4.0-a1

ISC BIND=9.2.0-rc5

ISC BIND=9.3.5-rc1

ISC BIND=9.3.0-rc1

ISC BIND=9.10.2-p1

ISC BIND=9.4.0-a5

ISC BIND=9.3.3

ISC BIND=9.10.0-b2

ISC BIND=9.3.0-b4

ISC BIND=9.4.0-rc1

ISC BIND=9.4.0

ISC BIND=9.3.0-rc3

ISC BIND=9.2.3

ISC BIND=9.4.3-p3

ISC BIND=9.6.0-rc1

ISC BIND=9.2.0-rc6

ISC BIND=9.2.0-rc10

ISC BIND=9.2.0

ISC BIND=9.2.9

ISC BIND=9.4.3-rc1

ISC BIND=9.0.1

ISC BIND=9.6.0-a1

ISC BIND=9.10.3

ISC BIND=9.4.0-a6

ISC BIND=9.2.0-a2

ISC BIND=9.10.1-p1

ISC BIND=9.1.1-rc2

ISC BIND=9.4.0-b1

ISC BIND=9.1.2-rc1

ISC BIND=9.10.3-p2

ISC BIND=9.2.4-rc4

ISC BIND=9.0.0-rc4

ISC BIND=9.0

ISC BIND=9.2.3-rc1

ISC BIND=9.4.2-rc2

ISC BIND=9.2.0-b1

ISC BIND=9.2.4-rc5

ISC BIND=9.2.0-rc1

ISC BIND=9.0.0-rc5

ISC BIND=9.6.0-b1

ISC BIND=9.2.6-rc1

ISC BIND=9.0.1-rc1

ISC BIND=9.3.1-b2

ISC BIND=9.10.3-b1

ISC BIND=9.1.1-rc7

ISC BIND=9.2.6

ISC BIND=9.2.0-a1

ISC BIND=9.4.3-p4

ISC BIND=9.6.0

Event History

Jan 22, 2010

CVE Published

via MITRE·09:20 PM

Data Sourced

via MITRE·09:20 PM

Description

Data Sourced

via NVD·10:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0382?

CVE-2010-0382 has been classified as a high severity vulnerability due to the potential impact it could have on system security.

How do I fix CVE-2010-0382?

To resolve CVE-2010-0382, it is recommended to upgrade to BIND version 9.4.3-P5 or later, or to an appropriate secure version of BIND.

What are the affected versions of BIND for CVE-2010-0382?

CVE-2010-0382 affects ISC BIND versions 9.0.x through 9.3.x, as well as several specified versions up to 9.7.0 beta.

What type of attack does CVE-2010-0382 involve?

CVE-2010-0382 could allow remote attackers to exploit the handling of out-of-bailiwick data in DNS responses to impact system security.

Is CVE-2010-0382 a remote code execution vulnerability?

CVE-2010-0382 does not explicitly state that it allows remote code execution, but it enables potential exploits via crafted DNS responses.