CVE-2010-3613 — bind9 - denial of service

描述

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

如何修補 CVE-2010-3613

要修補 CVE-2010-3613,請將受影響套件升級到下列已修補版本。

Debian/bind9—升級至 1:9.7.2.dfsg.P3-1 或更新版本
Debian/bind9—升級至 1:9.6.ESV.R3+dfsg-0+lenny1 或更新版本

CVE-2010-3613 正在被利用嗎?

中等 — EPSS 為 10.7%,可持續追蹤但非最高優先。

受影響套件(2)

from 0, < 1:9.7.2.dfsg.P3-1
from 0, < 1:9.6.ESV.R3+dfsg-0+lenny1

參考連結(1)

ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-3613