CVE-2010-0097 json
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSS…
published 2010-01-22 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-0129
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 9.4%
- EPSS 9.4% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Patch / fix
- isc bind 9.4.3-P5, 9.5.2-P2, 9.6.1-P3
- bind9 Debian 14, Debian 13, Debian 12 1:9.7.0.dfsg-1
debian advisories DEBIAN-CVE-2010-0097
- bind RHEL 5 30:9.3.6-4.P1.el5_4.2
- bind-sdb RHEL 5 30:9.3.6-4.P1.el5_4.2
- bind-libs RHEL 5 30:9.3.6-4.P1.el5_4.2
- bind-utils RHEL 5 30:9.3.6-4.P1.el5_4.2
- bind-chroot RHEL 5 30:9.3.6-4.P1.el5_4.2
- caching-nameserver RHEL 5 30:9.3.6-4.P1.el5_4.2
red hat advisories RHSA-2010:0062
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2010-0097 updated cvss 2.6
BIND DNSSEC NSEC/NSEC3 validation code could cause bogus NXDOMAIN responses
-
Red Hat Enterprise Linux (v. 5 server) bind 9.3.6-4.P1.el5_4.2, bind-sdb 9.3.6-4.P1.el5_4.2, bind-libs 9.3.6-4.P1.el5_4.2, bind-utils 9.3.6-4.P1.el5_4.2, bind-chroot 9.3.6-4.P1.el5_4.2, caching-nameserver 9.3.6-4.P1.el5_4.2 Red Hat Enterprise Linux Desktop (v. 5 client) bind 9.3.6-4.P1.el5_4.2, bind-sdb 9.3.6-4.P1.el5_4.2, bind-libs 9.3.6-4.P1.el5_4.2, bind-utils 9.3.6-4.P1.el5_4.2, bind-chroot 9.3.6-4.P1.el5_4.2, caching-nameserver 9.3.6-4.P1.el5_4.2 Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind 9.3.6-4.P1.el5_4.2, bind-sdb 9.3.6-4.P1.el5_4.2, bind-libs 9.3.6-4.P1.el5_4.2, bind-utils 9.3.6-4.P1.el5_4.2, bind-chroot 9.3.6-4.P1.el5_4.2, caching-nameserver 9.3.6-4.P1.el5_4.2fixed: vendor fix RHSA-2010:0062
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
9.36% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
rhn.redhat.com
/errata/RHSA-2010-0062.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2010-January/034202.html
vendor-advisory
-
ubuntu.com
/usn/USN-888-1
vendor-advisory
-
sunsolve.sun.com
/search/document.do?assetkey=1-77-1021798.1-1
vendor-advisory
-
marc.info
/?l=bugtraq&m=127195582210247&w=2
vendor-advisory
-
lists.apple.com
/archives/Security-announce/2011//Oct/msg00003.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2010-January/034196.html
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2010:021
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2010-0095.html
vendor-advisory
-
debian.org
/security/2010/dsa-2054
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-01/msg00009.html
vendor-advisory
-
vupen.com
/english/advisories/2010/0176
vdb-entry, vendor-advisory
-
secunia.com
/advisories/38240
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/38219
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/38169
third-party-advisory, vendor-advisory
-
osvdb.org
/61853
vdb-entry
-
securityfocus.com
/bid/37865
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7212
vdb-entry, signature
-
vupen.com
/english/advisories/2010/1352
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7430
vdb-entry, signature
-
vupen.com
/english/advisories/2010/0981
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/55753
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9357
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12205
vdb-entry, signature
-
secunia.com
/advisories/39334
third-party-advisory
-
secunia.com
/advisories/40086
third-party-advisory
-
vupen.com
/english/advisories/2010/0622
vdb-entry
-
secunia.com
/advisories/39582
third-party-advisory
-
securitytracker.com
/id?1023474
vdb-entry
- bugzilla.redhat.com /show_bug.cgi?id=554851
- h20564.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
- wiki.rpath.com /wiki/Advisories:rPSA-2010-0018
- support.apple.com /kb/HT5002
-
kb.cert.org
/vuls/id/360341
third-party-advisory, us-government-resource
- isc.org /advisories/CVE-2010-0097
Sources
- CVE List CVE-2010-0097
- NVD CVE-2010-0097
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Consolidate version constraints.