vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2010-0290

N/A
Published: January 22, 2010 at 09:20 PM UTC
Updated: June 16, 2026 at 11:15 PM UTC
1 product affected across 1 vendorBIND

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 7%

Description

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

BIND· Isc
95%
9.09.0.0 rc19.0.0 rc29.0.0 rc39.0.0 rc49.0.0 rc59.0.0 rc69.0.19.0.1 rc19.0.1 rc29.19.1.0 rc19.1.19.1.1 rc19.1.1 rc29.1.1 rc39.1.1 rc49.1.1 rc59.1.1 rc69.1.1 rc79.1.29.1.2 rc19.1.39.1.3 rc19.1.3 rc29.1.3 rc39.10.09.10.0 a19.10.0 a29.10.0 b19.10.0 b29.10.0 p19.10.0 p29.10.0 rc19.10.0 rc29.10.19.10.1 b19.10.1 b29.10.1 p19.10.1 p29.10.1 rc19.10.1 rc29.10.2 b19.10.2 p19.10.2 p29.10.2 p39.10.2 p49.10.2 rc19.10.2 rc29.10.39.10.3 b19.10.3 p19.10.3 p29.10.3 p39.10.3 rc19.29.2.09.2.0 a19.2.0 a29.2.0 a39.2.0 b19.2.0 b29.2.0 rc19.2.0 rc109.2.0 rc29.2.0 rc39.2.0 rc49.2.0 rc59.2.0 rc69.2.0 rc79.2.0 rc89.2.0 rc99.2.19.2.1 rc19.2.1 rc29.2.29.2.2 p29.2.2 p39.2.2 rc19.2.39.2.3 rc19.2.3 rc29.2.3 rc39.2.3 rc49.2.49.2.4 rc29.2.4 rc39.2.4 rc49.2.4 rc59.2.4 rc69.2.4 rc79.2.4 rc89.2.59.2.5 b29.2.5 rc19.2.69.2.6 rc19.2.79.2.7 rc19.2.7 rc29.2.7 rc39.2.89.2.99.2.9 rc19.39.3.09.3.0 b29.3.0 b39.3.0 b49.3.0 rc19.3.0 rc29.3.0 rc39.3.0 rc49.3.19.3.1 b29.3.1 rc19.3.29.3.2 rc19.3.39.3.3 rc19.3.3 rc29.3.3 rc39.3.49.3.59.3.5 rc19.3.5 rc29.3.69.3.6 rc19.49.4.09.4.0 a19.4.0 a29.4.0 a39.4.0 a49.4.0 a59.4.0 a69.4.0 b19.4.0 b29.4.0 b39.4.0 b49.4.0 rc19.4.0 rc29.4.19.4.29.4.2 rc19.4.2 rc29.4.39.4.3 b19.4.3 b29.4.3 b39.4.3 p19.4.3 p29.4.3 p39.4.3 p49.4.3 p59.4.3 rc19.6.09.6.0 a19.6.0 b19.6.0 p19.6.0 rc19.6.0 rc29.6.19.6.1 b19.6.1 p19.6.1 p29.6.1 rc19.7.0 b1

References (20)

Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
Mailing Listx_refsource_MLIST
Source: [email protected]
http://marc.info/?l=oss-security&m=126393609503704&w=2
Mailing Listx_refsource_MLIST
Source: [email protected]
http://marc.info/?l=oss-security&m=126399602810086&w=2
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/38219
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/38240
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/40086
x_refsource_CONFIRM
Source: [email protected]
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2010/dsa-2054

CVSS

4MEDIUM[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card