CVE-2010-3613

Publication date 1 December 2010

Last updated 24 July 2024


Ubuntu priority

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Status

Package Ubuntu Release Status
bind9 10.10 maverick
Fixed 1:9.7.1.dfsg.P2-2ubuntu0.1
10.04 LTS lucid
Fixed 1:9.7.0.dfsg.P1-1ubuntu0.1
9.10 karmic
Fixed 1:9.6.1.dfsg.P1-3ubuntu0.4
8.04 LTS hardy
Fixed 1:9.4.2.dfsg.P2-2ubuntu0.6
6.06 LTS dapper
Fixed 1:9.3.2-2ubuntu1.12

References

Related Ubuntu Security Notices (USN)

Other references