named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2130-1 | New BIND packages fix denial of service |
Ubuntu USN |
USN-1025-1 | Bind vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2024-08-07T03:18:52.898Z
Reserved: 2010-09-27T00:00:00
Link: CVE-2010-3614
No data.
Status : Deferred
Published: 2010-12-06T13:44:54.080
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3614
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN