PT-2011-3890 · Isc+1 · Isc Bind 9+1

Published 2011-07-08 · Updated 2018-10-09 · CVE-2011-2465

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions 9.8.0 through 9.8.1b1

Description The issue allows remote attackers to cause a denial of service, resulting in the named daemon crashing. This occurs when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For ISC BIND 9 versions 9.8.0 through 9.8.1b1, consider disabling recursion or restricting the use of Response Policy Zone (RPZ) until a patch is available. Additionally, avoid using DNAME or certain CNAME records in the RPZ to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-2465

Affected Products

Bind Server

Isc Bind 9

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2011-2465 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2465 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2465 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2465 · Vendor Advisory
• http://isc.org/software/bind/advisories/cve-2011-2465 · Vendor Advisory
• http://secunia.com/advisories/45185 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68374 · Note
• http://securitytracker.com/id?1025743 · Note
• http://securityfocus.com/bid/48565 · Note
• http://osvdb.org/73604 · Note
• http://kb.cert.org/vuls/id/137968 · Note
• http://securityfocus.com/archive/1/518750/100/0/threaded · Note