CVE-2010-3762

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
iscbind
𝑥
≤ 9.7.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
natty
not-affected
maverick
not-affected
lucid
Fixed 1:9.7.0.dfsg.P1-1ubuntu0.2
released
karmic
ignored
jaunty
ignored
hardy
Fixed 1:9.4.2.dfsg.P2-2ubuntu0.7
released
dapper
ignored
Common Weakness Enumeration
References
http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://support.avaya.com/css/P8/documents/100124923
http://www.debian.org/security/2010/dsa-2130
http://www.mandriva.com/security/advisories?name=MDVSA-2010:253
http://www.redhat.com/support/errata/RHSA-2010-0976.html
http://www.securityfocus.com/archive/1/516909/100/0/threaded
http://www.securityfocus.com/bid/45385
http://www.vmware.com/security/advisories/VMSA-2011-0004.html
http://www.vupen.com/english/advisories/2011/0606
http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://support.avaya.com/css/P8/documents/100124923
http://www.debian.org/security/2010/dsa-2130
http://www.mandriva.com/security/advisories?name=MDVSA-2010:253
http://www.redhat.com/support/errata/RHSA-2010-0976.html
http://www.securityfocus.com/archive/1/516909/100/0/threaded
http://www.securityfocus.com/bid/45385
http://www.vmware.com/security/advisories/VMSA-2011-0004.html
http://www.vupen.com/english/advisories/2011/0606