Login Request a demo
Unscored severity · published Jul 28, 2010
CVE-2010-0213
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to…
–
CVSS
6.5%
EPSS
No
On KEV
Description
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bind · Isc
9.7.1; 9.7.1 · source: NVD
Affected product
BI
Bind
Isc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0213
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
Vendor Advisory
http://secunia.com/advisories/40652
Vendor Advisory
http://secunia.com/advisories/40709
Vendor Advisory
http://www.isc.org/software/bind/advisories/cve-2010-0213
US Government Resource
http://www.kb.cert.org/vuls/id/211905
More from Bind
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2026-3593
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
9.8
CVE-2021-25216
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions…
8.6
CVE-2020-8616
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially…
8.6
CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature…