CVE-2010-3613: named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not prop...

Security readout for executives and security teams

CVE-2010-3613 is a remote denial-of-service flaw in ISC BIND named. A crafted DNS query for certain cached DNSSEC-related data can crash the daemon. The business risk is DNS availability loss, especially for organizations running affected BIND resolvers or DNS servers. Exposure is most likely where legacy ISC BIND named instances from the affected branches remain in use, including vendor-packaged operating systems or appliances. Internet-facing recursive resolvers and DNS infrastructure with DNSSEC caching behavior deserve priority review. Treat as a focused availability risk, not a broad compromise indicator. Prioritize remediation where DNS outages would disrupt customer access, authentication, mail routing, or internal service discovery. Mitigation focus: Upgrade BIND to the fixed branch version or a later vendor-supported package.; Prioritize Internet-facing recursive resolvers and critical authoritative DNS infrastructure.; Check operating system and appliance vendor advisories for backported fixes..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.