Description
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Published: 2010-12-03
Score: 6.4 Medium
EPSS: 6.8% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2130-1 New BIND packages fix denial of service
Ubuntu USN Ubuntu USN USN-1025-1 Bind vulnerabilities
References
Link Providers
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html cve-icon cve-icon
http://lists.vmware.com/pipermail/security-announce/2011/000126.html cve-icon cve-icon
http://secunia.com/advisories/42435 cve-icon cve-icon
http://secunia.com/advisories/42459 cve-icon cve-icon
http://secunia.com/advisories/42522 cve-icon cve-icon
http://secunia.com/advisories/42671 cve-icon cve-icon
http://securitytracker.com/id?1024817 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 cve-icon cve-icon
http://support.apple.com/kb/HT5002 cve-icon cve-icon
http://support.avaya.com/css/P8/documents/100124923 cve-icon cve-icon
http://www.debian.org/security/2010/dsa-2130 cve-icon cve-icon
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories cve-icon cve-icon
http://www.isc.org/software/bind/advisories/cve-2010-3614 cve-icon cve-icon
http://www.kb.cert.org/vuls/id/837744 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 cve-icon cve-icon
http://www.osvdb.org/69559 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0975.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0976.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/516909/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/45137 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1025-1 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2011-0004.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/3102 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/3103 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/3138 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/3139 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/3140 cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0606 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2010-3614 cve-icon
https://www.cve.org/CVERecord?id=CVE-2010-3614 cve-icon
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.13325}

epss

{'score': 0.13083}


cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-08-07T03:18:52.898Z

Reserved: 2010-09-27T00:00:00.000Z

Link: CVE-2010-3614

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-12-06T13:44:54.080

Modified: 2026-04-29T01:13:23.040

Link: CVE-2010-3614

cve-icon Redhat

Severity : Low

Publid Date: 2010-12-01T00:00:00Z

Links: CVE-2010-3614 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses