PT-2011-3890 · Isc+1 · Isc Bind 9+1

Publicado 2011-07-08 · Atualizado 2018-10-09 · CVE-2011-2465

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions 9.8.0 through 9.8.1b1

Description The issue allows remote attackers to cause a denial of service, resulting in the named daemon crashing. This occurs when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For ISC BIND 9 versions 9.8.0 through 9.8.1b1, consider disabling recursion or restricting the use of Response Policy Zone (RPZ) until a patch is available. Additionally, avoid using DNAME or certain CNAME records in the RPZ to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2011-2465

Produtos afetados

Bind Server

Isc Bind 9

Referências · 14

• https://nvd.nist.gov/vuln/detail/CVE-2011-2465 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2011-2465 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68374 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html · Aviso do Fabricante
• http://securitytracker.com/id?1025743 · Nota
• http://securityfocus.com/bid/48565 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2465 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-2465 · Aviso do Fabricante
• http://osvdb.org/73604 · Nota
• http://kb.cert.org/vuls/id/137968 · Nota
• http://isc.org/software/bind/advisories/cve-2011-2465 · Aviso do Fabricante
• http://secunia.com/advisories/45185 · Aviso do Fabricante
• http://securityfocus.com/archive/1/518750/100/0/threaded · Nota