CVE-2010-3615: ISC BIND

Medium severity, CVSS 5.0. EPSS: 9.8% chance of exploitation in the next 30 days.

named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.

Affected products

• ISC BIND: version 9.7.2 only

Published 2010-12-06. Last modified 2026-06-16.