CVE-2010-0213

Upstream information

CVE-2010-0213 at MITRE

Description

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.

---

SUSE information

CVSS v2 Scores

	National Vulnerability Database
Base Score	2.57
Vector	AV:N/AC:H/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	High
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entry: 644907 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2010:020, published Wed, 03 Nov 2010 12:00:00 +0000
• openSUSE-SU-2010:0917-1, published Thu, 28 Oct 2010 12:08:11 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE 11.3	bind-debuginfo >= 9.7.1P2-0.2.1 bind-debugsource >= 9.7.1P2-0.2.1 bind-libs-debuginfo >= 9.7.1P2-0.2.1 bind-libs-debuginfo-32bit >= 9.7.1P2-0.2.1 bind-utils-debuginfo >= 9.7.1P2-0.2.1
openSUSE 11.3	bind >= 9.7.1P2-0.2.1 bind-chrootenv >= 9.7.1P2-0.2.1 bind-devel >= 9.7.1P2-0.2.1 bind-doc >= 9.7.1P2-0.2.1 bind-libs >= 9.7.1P2-0.2.1 bind-libs-32bit >= 9.7.1P2-0.2.1 bind-utils >= 9.7.1P2-0.2.1