CVE-2010-0213 Denial of service in n/a

Low 2.6 Published 27 Jul 2010 Updated 7 Aug 2024

Remote attackers can cause a denial of service in BIND DNS servers via infinite loops when specific DNSSEC validation configurations are active.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2010-0213?

CVE-2010-0213 is a low-severity denial of service vulnerability in Isc Bind, published on 27 Jul 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.

Weakness: CWE-19

Which versions are affected by CVE-2010-0213?

It affects 1 product.

Products include Isc Bind.

How do I fix CVE-2010-0213?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2010-0213 being exploited?

There is no known exploitation of CVE-2010-0213 in the wild and no public exploit code.

All Isc Bind vulnerabilities

Sources

Also known as DEBIAN-CVE-2010-0213, GHSA-2p9p-xfg3-2fr3.