CVE-2010-3762: ISC BIND

Medium severity, CVSS 4.3. EPSS: 8.1% chance of exploitation in the next 30 days.

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

Affected products

• ISC BIND: up to and including 9.7.2

Published 2010-10-05. Last modified 2026-06-16.