Candidate: CVE-2010-0382
PublicDate: 2010-01-22 22:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0382
 https://ubuntu.com/security/notices/USN-888-1
Description:
 ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6
 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying
 a secure response without re-fetching from the original source, which
 allows remote attackers to have an unspecified impact via a crafted
 response, aka Bug 20819.  NOTE: this vulnerability exists because of a
 regression during the fix for CVE-2009-4022.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_bind9:
upstream_bind9: needs-triage
dapper_bind9: released (1:9.3.2-2ubuntu1.11)
hardy_bind9: released (1:9.4.2.dfsg.P2-2ubuntu0.5)
intrepid_bind9: released (1:9.5.0.dfsg.P2-1ubuntu3.5)
jaunty_bind9: released (1:9.5.1.dfsg.P2-1ubuntu0.4)
karmic_bind9: released (1:9.6.1.dfsg.P1-3ubuntu0.3)
devel_bind9: not-affected (1:9.6.1.dfsg.P3-1~build1)