Description
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Metrics
CVSS 2.0 6.4/10
AV:N/AC:L/Au:N/C:N/I:P/A:PWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Dec 6, 2010
- Last modified
- Jun 16, 2026
- NVD status
- Modified