Lucene search

K
cve[email protected]CVE-2010-3762
HistoryOct 05, 2010 - 10:00 p.m.

CVE-2010-3762

2010-10-0522:00:06
CWE-20
web.nvd.nist.gov
55
isc bind
dnssec
denial of service
cve-2010-3762
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

Affected configurations

NVD
Node
iscbindRange9.7.2p2
CPENameOperatorVersion
isc:bindisc bindle9.7.2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%