Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23951
HistoryApr 10, 2020 - 12:41 a.m.

Cache Poisoning Attack

2020-04-1000:41:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.013 Low

EPSS

Percentile

85.8%

JSON

bind is vulnerable to cache poisoning attack. The vulnerability exists as the original fix for CVE-2009-4022 was found to be incomplete. BIND was incorrectly caching certain responses without performing proper DNSSEC validation. CNAME and DNAME records could be cached, without proper DNSSEC validation, when received from processing recursive client queries that requested DNSSEC records but indicated that checking should be disabled. A remote attacker could use this flaw to bypass the DNSSEC validation check and perform a cache poisoning attack if the target BIND server was receiving such client queries.

References

Related

nessus 40
f5 5
ubuntucve 3
debiancve 3
nvd 3
cve 3
cvelist 3
prion 3
openvas 56
securityvulns 6
ubuntu 2
gentoo 1
oraclelinux 2
redhat 2
centos 2
cert 1
veracode 1
osv 2
debian 3
fedora 4
slackware 2
freebsd_advisory 1
suse 2
checkpoint_security 1
seebug 1
altlinux 4
vmware 4
nessus
nessus
F5 Networks BIG-IP : BIND vulnerability (SOL15748)
2014-10-28 00:00:00
openSUSE Security Update : bind (bind-1845)
2010-01-26 00:00:00
openSUSE Security Update : bind (bind-1845)
2010-01-26 00:00:00
f5
f5
SOL15748 - BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
K15748 : BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
SOL10898 - DNSSEC BIND vulnerability - CVE-2009-4022
2009-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-0290
2010-01-19 00:00:00
CVE-2009-4022
2009-11-25 00:00:00
CVE-2010-0382
2010-01-22 00:00:00
debiancve
debiancve
CVE-2010-0290
2010-01-22 22:00:00
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0382
2010-01-22 22:00:00
nvd
nvd
CVE-2010-0290
2010-01-22 22:00:00
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0382
2010-01-22 22:00:00
cve
cve
CVE-2010-0290
2010-01-22 22:00:00
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0382
2010-01-22 22:00:00
cvelist
cvelist
CVE-2010-0290
2010-01-22 21:20:00
CVE-2009-4022
2009-11-25 16:00:00
CVE-2010-0382
2010-01-22 21:20:00
prion
prion
Design/Logic Flaw
2010-01-22 22:00:00
Design/Logic Flaw
2009-11-25 16:30:00
Code injection
2010-01-22 22:00:00
openvas
openvas
Mandriva Update for bind MDVSA-2010:021 (bind)
2010-01-22 00:00:00
RedHat Update for bind RHSA-2010:0062-02
2010-01-25 00:00:00
CentOS Update for bind CESA-2010:0062 centos5 i386
2011-08-09 00:00:00
securityvulns
securityvulns
bind DNS server cache poisoning
2010-03-17 00:00:00
[ MDVSA-2010:021 ] bind
2010-01-21 00:00:00
rPSA-2010-0018-1 bind bind-utils caching-nameserver
2010-03-17 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2010-01-20 00:00:00
Bind vulnerability
2009-12-07 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2010-06-01 00:00:00
oraclelinux
oraclelinux
bind security update
2010-01-20 00:00:00
bind security update
2009-11-30 00:00:00
redhat
redhat
(RHSA-2010:0062) Moderate: bind security update
2010-01-20 00:00:00
(RHSA-2009:1620) Moderate: bind security update
2009-11-30 00:00:00
centos
centos
bind, caching security update
2010-01-20 17:59:57
bind, caching security update
2009-12-17 12:39:21
cert
cert
BIND DNS Nameserver, DNSSEC validation Vulnerability
2009-12-01 00:00:00
veracode
veracode
Cache Poisoning Attack
2020-04-10 00:41:27
osv
osv
bind9 - cache poisoning
2009-12-23 00:00:00
bind9 - cache poisoning
2010-06-04 00:00:00
debian
debian
[SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning
2009-12-23 07:07:33
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
2010-06-15 20:05:57
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
2010-06-04 19:22:30
fedora
fedora
[SECURITY] Fedora 12 Update: bind-9.6.1-13.P2.fc12
2009-11-27 21:43:51
[SECURITY] Fedora 11 Update: bind-9.6.1-7.P2.fc11
2009-11-27 21:40:17
[SECURITY] Fedora 12 Update: bind-9.6.1-15.P3.fc12
2010-01-21 00:14:47
slackware
slackware
bind
2009-12-02 17:30:47
[slackware-security] bind
2010-06-25 18:32:41
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:01.bind
2010-01-06 00:00:00
suse
suse
DNSSEC cache poisoning in bind
2009-12-02 11:21:35
remote code execution in acroread
2010-01-26 16:40:23
checkpoint_security
checkpoint_security
Check Point response to vulnerability in ISC BIND (CVE-2009-4022) on UTM-1 Edge
2010-01-14 22:00:00
seebug
seebug
ISC BIND 9 DNSSECζŸ₯θ―’ε“εΊ”θΏœη¨‹ηΌ“ε­˜δΈ­ζ―’ζΌζ΄ž
2009-11-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 7 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 6 package bind version 9.3.6-alt7
2011-12-16 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

0.013 Low

EPSS

Percentile

85.8%

JSON
Related for VERACODE:23951
nessus40f55ubuntucve3debiancve3nvd3cve3cvelist3prion3openvas56securityvulns6ubuntu2gentoo1oraclelinux2redhat2centos2cert1veracode1osv2debian3fedora4slackware2freebsd_advisory1suse2checkpoint_security1seebug1altlinux4vmware4