CVE-2010-3613

Publication date 1 December 2010

Last updated 24 July 2024

Ubuntu priority

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
bind9	10.10 maverick	Fixed 1:9.7.1.dfsg.P2-2ubuntu0.1
	10.04 LTS lucid	Fixed 1:9.7.0.dfsg.P1-1ubuntu0.1
	9.10 karmic	Fixed 1:9.6.1.dfsg.P1-3ubuntu0.4
	8.04 LTS hardy	Fixed 1:9.4.2.dfsg.P2-2ubuntu0.6
	6.06 LTS dapper	Fixed 1:9.3.2-2ubuntu1.12

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-1025-1
Bind vulnerabilities
1 December 2010

Other references

http://www.isc.org/software/bind/advisories/cve-2010-3613
https://www.cve.org/CVERecord?id=CVE-2010-3613