CVE-2010-3614
EPSS 16.9%
描述
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
如何修補 CVE-2010-3614
要修補 CVE-2010-3614,請將受影響套件升級到下列已修補版本。
- Debian/bind9—升級至 1:9.7.2.dfsg.P3-1 或更新版本
CVE-2010-3614 正在被利用嗎?
中等 — EPSS 為 16.9%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0, < 1:9.7.2.dfsg.P3-1