CVE-2010-3614: Input Validation
Published Dec 3, 2010
·Updated
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Affected Software
236 affected components
ISC BIND=9.6.2-p2
ISC BIND=9.6.2-p1
ISC BIND=9.6.1-p2
ISC BIND=9.2.0-rc7
ISC BIND=9.1.1-rc6
ISC BIND=9.3.1-rc1
ISC BIND=9.5.0-a6
ISC BIND=9.1.1
ISC BIND=9.4.3-b1
ISC BIND=9.5.2-p4
ISC BIND=9.2.3-rc2
ISC BIND=9.7.5-rc1
ISC BIND=9.1.3
ISC BIND=9.5.1-b2
ISC BIND=9.7.0-rc2
ISC BIND=9.4-r4
ISC BIND=9.4.3-b2
ISC BIND=9.4-r3
ISC BIND=9.6.1-rc1
ISC BIND=9.6-r6_rc1
ISC BIND=9.1.1-rc1
ISC BIND=9.7.1-b1
ISC BIND=9.1.3-rc3
ISC BIND=9.7.2-rc1
ISC BIND=9.4-r5
ISC BIND=9.4.0-b2
ISC BIND=9.3.5
ISC BIND=9.2.0-b2
ISC BIND=9.7.0-b1
ISC BIND=9.3.2-rc1
ISC BIND=9.2.0-a3
ISC BIND=9.7.0-a1
ISC BIND=9.2.3-rc4
ISC BIND=9.7.0-rc1
ISC BIND=9.7.0-p2
ISC BIND=9.6.1-p3
ISC BIND=9.7.4-b1
ISC BIND=9.5.0-p2_w1
ISC BIND=9.2.8
ISC BIND=9.2
ISC BIND=9.3.0-rc4
ISC BIND=9.2.4-rc8
ISC BIND=9.2.1-rc1
ISC BIND=9.3.0-rc2
ISC BIND=9.6.2
ISC BIND=9.0.0-rc2
ISC BIND=9.5.0-a3
ISC BIND=9.5
ISC BIND=9.7.4
ISC BIND=9.6.1
ISC BIND=9.4.0-a4
ISC BIND=9.6.2-b1
ISC BIND=9.3
ISC BIND=9.3.4
ISC BIND=9.3.0-b2
ISC BIND=9.5.1-rc2
ISC BIND=9.1.0-rc1
ISC BIND=9.7.2
ISC BIND=9.2.7-rc1
ISC BIND=9.5.2
ISC BIND=9.0.0-rc1
ISC BIND=9.6-r3
ISC BIND=9.2.5
ISC BIND=9.7.5-b1
ISC BIND=9.3.2
ISC BIND=9.4-r5-rc1
ISC BIND=9.7.2-p2
ISC BIND=9.1.1-rc5
ISC BIND=9.5.0-rc1
ISC BIND=9.2.3-rc3
ISC BIND=9.2.0-rc2
ISC BIND=9.5.2-b1
ISC BIND=9.5.0-p1
ISC BIND=9.2.5-b2
ISC BIND=9.3.6-rc1
ISC BIND=9.3.6
ISC BIND=9.2.2
ISC BIND=9.7.5-rc2
ISC BIND=9.4.3-p2
ISC BIND=9.6.1-p1
ISC BIND=9.4.1
ISC BIND=9.6-r6_b1
ISC BIND=9.5.2-rc1
ISC BIND=9.4-r2
ISC BIND=9.2.0-rc9
ISC BIND=9.4
ISC BIND=9.4.0-a3
ISC BIND=9.5.0-a1
ISC BIND=9.5.0-b1
ISC BIND=9.0.0-rc3
ISC BIND=9.7.1
ISC BIND=9.5.1-b3
ISC BIND=9.2.2-p2
ISC BIND=9.5.2-p1
ISC BIND=9.3.3-rc1
ISC BIND=9.2.4-rc6
ISC BIND=9.5.0-a7
ISC BIND=9.7.0-a3
ISC BIND=9.3.0
ISC BIND=9.4.0-rc2
ISC BIND=9.7.1-rc1
ISC BIND=9.3.0-b3
ISC BIND=9.4-r5-p1
ISC BIND=9.3.5-rc2
ISC BIND=9.7.1-p2
ISC BIND=9.5.0-a2
ISC BIND=9.4-b1
ISC BIND=9.6.0-p1
ISC BIND=9.5.0-a4
ISC BIND=9.3.3-rc2
ISC BIND=9.2.4-rc7
ISC BIND=9.2.7-rc3
ISC BIND=9.5.0-a5
ISC BIND=9.1.3-rc2
ISC BIND=9.7.0
ISC BIND=9.5.0-p2_w2
ISC BIND=9.6
ISC BIND=9.7.6-p1
ISC BIND=9.7.0-a2
ISC BIND=9.6-r6
ISC BIND=9.4-r5-b1
ISC BIND=9.2.7
ISC BIND=9.4
ISC BIND=9.6-r9_p1
ISC BIND=9.2.4
ISC BIND=9.7.0-p1
ISC BIND=9.2.5-rc1
ISC BIND=9.6-r5_b1
ISC BIND=9.6-r2
ISC BIND=9.2.1
ISC BIND=9.1.2
ISC BIND=9.5.0
ISC BIND=9.6-r9
ISC BIND=9.1.1-rc4
ISC BIND=9.6-r1
ISC BIND=9.6-r7_p2
ISC BIND=9.7.2-p3
ISC BIND=9.4.2
ISC BIND=9.4.0-a2
ISC BIND=9.3.1
ISC BIND=9.4.3-b3
ISC BIND=9.7.4-rc1
ISC BIND=9.2.0-rc4
ISC BIND=9.7.3-p1
ISC BIND=9.1.1-rc3
ISC BIND=9.1
ISC BIND=9.6.1-b1
ISC BIND=9.3.3-rc3
ISC BIND=9.2.1-rc2
ISC BIND=9.4.2-rc1
ISC BIND=9.4.0-b4
ISC BIND=9.4.0-b3
ISC BIND=9.2.4-rc2
ISC BIND=9.6-r6_rc2
ISC BIND=9.2.2-p3
ISC BIND=9.6-r7_p1
ISC BIND=9.6.0-rc2
ISC BIND=9.2.9-rc1
ISC BIND=9.2.7-rc2
ISC BIND=9.4.3
ISC BIND=9.1.3-rc1
ISC BIND=9.7.1-p1
ISC BIND=9.2.2-rc1
ISC BIND=9.4-r4-p1
ISC BIND=9.2.0-rc3
ISC BIND=9.5.2-p2
ISC BIND=9.6-r5
ISC BIND=9.5.0-p2
ISC BIND=9.2.0-rc8
ISC BIND=9.0.1-rc2
ISC BIND=9.2.4-rc3
ISC BIND=9.0.0-rc6
ISC BIND=9.4.0-a1
ISC BIND=9.6-r4_p1
ISC BIND=9.2.0-rc5
ISC BIND=9.3.5-rc1
ISC BIND=9.3.0-rc1
ISC BIND=9.7.3-rc1
ISC BIND=9.4.0-a5
ISC BIND=9.3.3
ISC BIND=9.7.3
ISC BIND=9.6-r7
ISC BIND=9.6-r5_p1
ISC BIND=9.5.0-b3
ISC BIND=9.4-r1
ISC BIND=9.3.0-b4
ISC BIND=9.4.0-rc1
ISC BIND=9.4.0
ISC BIND=9.5.2-p3
ISC BIND=9.5.0-b2
ISC BIND=9.3.0-rc3
ISC BIND=9.2.3
ISC BIND=9.6.0-rc1
ISC BIND=9.7.2-p1
ISC BIND=9.2.0-rc6
ISC BIND=9.2.0-rc10
ISC BIND=9.7.5
ISC BIND=9.2.0
ISC BIND=9.2.9
ISC BIND=9.5.1-b1
ISC BIND=9.4.3-rc1
ISC BIND=9.0.1
ISC BIND=9.6.0-a1
ISC BIND=9.4.0-a6
ISC BIND=9.5.1-rc1
ISC BIND=9.2.0-a2
ISC BIND=9.5.3-b1
ISC BIND=9.1.1-rc2
ISC BIND=9.5.3-rc1
ISC BIND=9.4.0-b1
ISC BIND=9.1.2-rc1
ISC BIND=9.2.4-rc4
ISC BIND=9.0.0-rc4
ISC BIND=9.0
ISC BIND=9.2.3-rc1
ISC BIND=9.7.3-b1
ISC BIND=9.4.2-rc2
ISC BIND=9.2.0-b1
ISC BIND=9.6-r4
ISC BIND=9.2.4-rc5
ISC BIND=9.2.0-rc1
ISC BIND=9.0.0-rc5
ISC BIND=9.6.0-b1
ISC BIND=9.2.6-rc1
ISC BIND=9.0.1-rc1
ISC BIND=9.3.1-b2
ISC BIND=9.7.0-b2
ISC BIND=9.7.6-p2
ISC BIND=9.1.1-rc7
ISC BIND=9.2.6
ISC BIND=9.2.0-a1
ISC BIND=9.7.4-p1
ISC BIND=9.5.1
ISC BIND=9.7.6
ISC BIND=9.6.0
ISC BIND=9.7.0-b3
Event History
Dec 3, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3614?
CVE-2010-3614 has been classified as a high severity vulnerability due to its potential to cause denial of service during DNSSEC validation.
2
How do I fix CVE-2010-3614?
To fix CVE-2010-3614, upgrade to BIND versions 9.6.2-P3, 9.7.2-P3, 9.4-ESV-R4, or 9.6-ESV-R3 or later.
3
What are the affected software versions for CVE-2010-3614?
CVE-2010-3614 affects BIND versions prior to 9.6.2-P3, 9.7.2-P3, 9.4-ESV-R4, and 9.6-ESV-R3.
4
Who is impacted by CVE-2010-3614?
Any users or organizations running vulnerable versions of BIND that perform DNSSEC validations are at risk from CVE-2010-3614.
5
What kind of attacks can CVE-2010-3614 allow?
CVE-2010-3614 can allow remote attackers to trigger a denial of service condition in the affected instances of BIND.