CVE-2010-3613: ISC BIND

Medium severity, CVSS 4.0. EPSS: 9.1% chance of exploitation in the next 30 days.

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Affected products

• ISC BIND: version 9.6 only; version 9.6.2 only; version 9.7.0 only; version 9.7.1 only; version 9.7.2 only

Published 2010-12-06. Last modified 2026-06-16.