CVE-2010-0382

원문 설명

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.

영향받는 소프트웨어

• BIND 9 = 9.6.0= 9.0= 9.2.3= 9.2.7= 9.3.2= 9.3.5 정확 일치

상세

공개일

2010-01-22

최종 수정

2026-06-16

CVSS 벡터

AV:N/AC:H/Au:N/C:C/I:C/A:C

참고 자료

• cve.org/CVE-2010-0382
• nvd.nist.gov/vuln/detail/CVE-2010-0382
• secunia.com/advisories/40086
• wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
• www.debian.org/security/2010/dsa-2054
• www.vupen.com/english/advisories/2010/0622
• www.vupen.com/english/advisories/2010/1352
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11753
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6665
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7086
• www.isc.org/advisories/CVE-2009-4022v6