PT-2011-3889 · Isc+3 · Isc Bind 9+3

Publicado 2011-07-07 · Atualizado 2024-06-15 · CVE-2011-2464

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions 9.6.x before 9.6-ESV-R4-P3 ISC BIND 9 versions 9.7.x before 9.7.3-P3 ISC BIND 9 versions 9.8.x before 9.8.0-P4

Description The issue allows remote attackers to cause a denial of service, resulting in the named daemon crashing, by sending a crafted UPDATE request.

Recommendations For ISC BIND 9 versions 9.6.x before 9.6-ESV-R4-P3, update to version 9.6-ESV-R4-P3 or later. For ISC BIND 9 versions 9.7.x before 9.7.3-P3, update to version 9.7.3-P3 or later. For ISC BIND 9 versions 9.8.x before 9.8.0-P4, update to version 9.8.0-P4 or later.

Correção

Identificadores relacionados

CVE-2011-2464

DSA-2272-1

HPSBUX02719

OPENSUSE-SU-2024:10467-1

RHSA-2011:0926

RHSA-2011_0926

SUSE-SU-2015:0480-1

Produtos afetados

Bind Server

Hp-Ux

Isc Bind 9

Red Hat

Referências · 77

• http://securityfocus.com/archive/1/518749/100/0/threaded · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13997 · Nota
• https://suse.com/security/cve/CVE-2012-5166 · Nota
• https://suse.com/security/cve/CVE-2015-8705 · Nota
• https://suse.com/security/cve/CVE-2009-4022 · Nota
• http://debian.org/security/2011/dsa-2272 · Aviso do Fabricante
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html · Aviso do Fabricante
• http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial · Nota
• https://suse.com/security/cve/CVE-2016-1285 · Nota
• https://suse.com/security/cve/CVE-2014-3214 · Nota
• https://suse.com/security/cve/CVE-2010-3615 · Nota
• https://suse.com/security/cve/CVE-2016-2776 · Nota
• https://suse.com/security/cve/CVE-2011-0414 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10467-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-5689 · Nota