Novell Home

CVE-2010-0213

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2010-0213 at MITRE

Description

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.

NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P)

Novell/SUSE information

Novell Bugzilla entry: 644907

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 11.3
  • bind-debuginfo >= 9.7.1P2-0.2.1
  • bind-debugsource >= 9.7.1P2-0.2.1
  • bind-libs-debuginfo >= 9.7.1P2-0.2.1
  • bind-libs-debuginfo-32bit >= 9.7.1P2-0.2.1
  • bind-utils-debuginfo >= 9.7.1P2-0.2.1
openSUSE 11.3
  • bind >= 9.7.1P2-0.2.1
  • bind-chrootenv >= 9.7.1P2-0.2.1
  • bind-devel >= 9.7.1P2-0.2.1
  • bind-doc >= 9.7.1P2-0.2.1
  • bind-libs >= 9.7.1P2-0.2.1
  • bind-libs-32bit >= 9.7.1P2-0.2.1
  • bind-utils >= 9.7.1P2-0.2.1

© 2013 Novell