CVE-2010-3762

Published: Oct 5, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

Affected (1)

Products: Isc: Bind

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Up to 9.7.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: cve@mitre.org

http://support.avaya.com/css/P8/documents/100124923

Source: cve@mitre.org

http://www.debian.org/security/2010/dsa-2130

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:253

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0976.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/45385

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0606

Source: cve@mitre.org

http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.vmware.com/pipermail/security-announce/2011/000126.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/css/P8/documents/100124923

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-2130

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:253

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0976.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516909/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/45385

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2011-0004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0606

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.