CVE-2010-3615
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which...
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
Exploit likelihood
What each source reports
NVD Score used
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
CVE-2010-3615- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
CVE-2010-3615- Updated
- 2026-11-02
EUVDEUVD-2010-3611 No score
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
EUVD-2010-3611- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j2v8-rqc3-xfr2 No score
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which...
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
GHSA-j2v8-rqc3-xfr2- Updated
- 2026-11-02
OSV No score
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
CVE-2010-3615- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3615 No score
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
- Record
DEBIAN-CVE-2010-3615- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind9Debian:12 |
before 1:9.7.2.dfsg.P3-1 | 1:9.7.2.dfsg.P3-1 |
bind9Debian:13 |
before 1:9.7.2.dfsg.P3-1 | 1:9.7.2.dfsg.P3-1 |
bind9Debian:14 |
before 1:9.7.2.dfsg.P3-1 | 1:9.7.2.dfsg.P3-1 |
bindopenSUSE:Tumbleweed From an advisory covering 37 CVEs |
before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3615 is a medium vulnerability (CVSS 5.0) in Isc Bind, published December 3, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.79%, the 95th percentile. Fixed in bind9 1:9.7.2.dfsg.P3-1.
References
osvdb.org/69568
isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories
securitytracker.com/id?1024817
secunia.com/advisories/42458
securityfocus.com/bid/45134
Show 45 moreShow less
vupen.com/english/advisories/2010/3102
kb.cert.org/vuls/id/510208
lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190
nvd.nist.gov/vuln/detail/CVE-2010-3615
github.com/advisories/GHSA-j2v8-rqc3-xfr2
security-tracker.debian.org/tracker/CVE-2010-3615
suse.com/security/cve/CVE-2009-0696