Description
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.
Published: 2010-01-22
Score: 7.6 High
EPSS: 28.4% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2054-1 New bind9 packages fix cache poisoning
Debian DSA Debian DSA DSA-2054-2 New bind9 packages fix cache poisoning
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T00:45:12.225Z

Reserved: 2010-01-22T00:00:00.000Z

Link: CVE-2010-0382

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-01-22T22:00:00.757

Modified: 2026-04-29T01:13:23.040

Link: CVE-2010-0382

cve-icon Redhat

Severity : Moderate

Publid Date: 2010-01-19T00:00:00Z

Links: CVE-2010-0382 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses