A vulnerability has been reported in BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling requests for the "RRSIG" record type where the answer is not already in the cache, which can lead to BIND entering an endless loop generating "RRSIG" queries to the authoritative servers.

Successful exploitation requires that the server is acting as validating recursive server and has one or more trust anchors configured statically and/or via DLV.

The vulnerability is reported in BIND 9.7.1 or 9.7.1-P1.

Solution
Update to BIND 9.7.1-P2.

Provided and/or discovered by
The vendor credits Marco Davids of SIDN.

Original Advisory
http://www.isc.org/software/bind/advisories/cve-2010-0213

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area