Lucene search
HistoryMay 31, 2011 - 8:55 p.m.
CVE-2011-1910
cve-2011-1910
isc bind
off-by-one error
denial of service
remote dns servers
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
8.1
Confidence
High
EPSS
0.943
Percentile
99.2%
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Affected configurations
Node
iscbindMatch9.0
ORiscbindMatch9.0.0rc1
ORiscbindMatch9.0.0rc2
ORiscbindMatch9.0.0rc3
ORiscbindMatch9.0.0rc4
ORiscbindMatch9.0.0rc5
ORiscbindMatch9.0.0rc6
ORiscbindMatch9.0.1
ORiscbindMatch9.0.1rc1
ORiscbindMatch9.0.1rc2
ORiscbindMatch9.1
ORiscbindMatch9.1.0rc1
ORiscbindMatch9.1.1
ORiscbindMatch9.1.1rc1
ORiscbindMatch9.1.1rc2
ORiscbindMatch9.1.1rc3
ORiscbindMatch9.1.1rc4
ORiscbindMatch9.1.1rc5
ORiscbindMatch9.1.1rc6
ORiscbindMatch9.1.1rc7
ORiscbindMatch9.1.2
ORiscbindMatch9.1.2rc1
ORiscbindMatch9.1.3
ORiscbindMatch9.1.3rc1
ORiscbindMatch9.1.3rc2
ORiscbindMatch9.1.3rc3
ORiscbindMatch9.2
ORiscbindMatch9.2.0
ORiscbindMatch9.2.0a1
ORiscbindMatch9.2.0a2
ORiscbindMatch9.2.0a3
ORiscbindMatch9.2.0b1
ORiscbindMatch9.2.0b2
ORiscbindMatch9.2.0rc1
ORiscbindMatch9.2.0rc10
ORiscbindMatch9.2.0rc2
ORiscbindMatch9.2.0rc3
ORiscbindMatch9.2.0rc4
ORiscbindMatch9.2.0rc5
ORiscbindMatch9.2.0rc6
ORiscbindMatch9.2.0rc7
ORiscbindMatch9.2.0rc8
ORiscbindMatch9.2.0rc9
ORiscbindMatch9.2.1
ORiscbindMatch9.2.1rc1
ORiscbindMatch9.2.1rc2
ORiscbindMatch9.2.2
ORiscbindMatch9.2.2p2
ORiscbindMatch9.2.2p3
ORiscbindMatch9.2.2rc1
ORiscbindMatch9.2.3
ORiscbindMatch9.2.3rc1
ORiscbindMatch9.2.3rc2
ORiscbindMatch9.2.3rc3
ORiscbindMatch9.2.3rc4
ORiscbindMatch9.2.4
ORiscbindMatch9.2.4rc2
ORiscbindMatch9.2.4rc3
ORiscbindMatch9.2.4rc4
ORiscbindMatch9.2.4rc5
ORiscbindMatch9.2.4rc6
ORiscbindMatch9.2.4rc7
ORiscbindMatch9.2.4rc8
ORiscbindMatch9.2.5
ORiscbindMatch9.2.5b2
ORiscbindMatch9.2.5rc1
ORiscbindMatch9.2.6
ORiscbindMatch9.2.6rc1
ORiscbindMatch9.2.7
ORiscbindMatch9.2.7rc1
ORiscbindMatch9.2.7rc2
ORiscbindMatch9.2.7rc3
ORiscbindMatch9.2.8
ORiscbindMatch9.2.9
ORiscbindMatch9.2.9rc1
ORiscbindMatch9.3
ORiscbindMatch9.3.0
ORiscbindMatch9.3.0b2
ORiscbindMatch9.3.0b3
ORiscbindMatch9.3.0b4
ORiscbindMatch9.3.0rc1
ORiscbindMatch9.3.0rc2
ORiscbindMatch9.3.0rc3
ORiscbindMatch9.3.0rc4
ORiscbindMatch9.3.1
ORiscbindMatch9.3.1b2
ORiscbindMatch9.3.1rc1
ORiscbindMatch9.3.2
ORiscbindMatch9.3.2rc1
ORiscbindMatch9.3.3
ORiscbindMatch9.3.3rc1
ORiscbindMatch9.3.3rc2
ORiscbindMatch9.3.3rc3
ORiscbindMatch9.3.4
ORiscbindMatch9.3.5
ORiscbindMatch9.3.5p2_w1
ORiscbindMatch9.3.5rc1
ORiscbindMatch9.3.5rc2
ORiscbindMatch9.3.6
ORiscbindMatch9.3.6rc1
ORiscbindMatch9.4
ORiscbindMatch9.4esv
ORiscbindMatch9.4b1esv
ORiscbindMatch9.4r1esv
ORiscbindMatch9.4r2esv
ORiscbindMatch9.4r3esv
ORiscbindMatch9.4r4esv
ORiscbindMatch9.4r4-p1esv
ORiscbindMatch9.4r5esv
ORiscbindMatch9.4r5-b1esv
ORiscbindMatch9.4r5-p1esv
ORiscbindMatch9.4r5-rc1esv
ORiscbindMatch9.4.0
ORiscbindMatch9.4.0a1
ORiscbindMatch9.4.0a2
ORiscbindMatch9.4.0a3
ORiscbindMatch9.4.0a4
ORiscbindMatch9.4.0a5
ORiscbindMatch9.4.0a6
ORiscbindMatch9.4.0b1
ORiscbindMatch9.4.0b2
ORiscbindMatch9.4.0b3
ORiscbindMatch9.4.0b4
ORiscbindMatch9.4.0rc1
ORiscbindMatch9.4.0rc2
ORiscbindMatch9.4.1
ORiscbindMatch9.4.2
ORiscbindMatch9.4.2p2_w1
ORiscbindMatch9.4.2rc1
ORiscbindMatch9.4.2rc2
ORiscbindMatch9.4.3
ORiscbindMatch9.4.3b1
ORiscbindMatch9.4.3b2
ORiscbindMatch9.4.3b3
ORiscbindMatch9.4.3p1
ORiscbindMatch9.4.3p2
ORiscbindMatch9.4.3p3
ORiscbindMatch9.4.3p4
ORiscbindMatch9.4.3p5
ORiscbindMatch9.4.3rc1
ORiscbindMatch9.5
ORiscbindMatch9.5.0
ORiscbindMatch9.5.0a1
ORiscbindMatch9.5.0a2
ORiscbindMatch9.5.0a3
ORiscbindMatch9.5.0a4
ORiscbindMatch9.5.0a5
ORiscbindMatch9.5.0a6
ORiscbindMatch9.5.0a7
ORiscbindMatch9.5.0b1
ORiscbindMatch9.5.0b2
ORiscbindMatch9.5.0b3
ORiscbindMatch9.5.0p1
ORiscbindMatch9.5.0p2
ORiscbindMatch9.5.0p2_w1
ORiscbindMatch9.5.0p2_w2
ORiscbindMatch9.5.0rc1
ORiscbindMatch9.5.1
ORiscbindMatch9.5.1b1
ORiscbindMatch9.5.1b2
ORiscbindMatch9.5.1b3
ORiscbindMatch9.5.1rc1
ORiscbindMatch9.5.1rc2
ORiscbindMatch9.5.2
ORiscbindMatch9.5.2b1
ORiscbindMatch9.5.2p1
ORiscbindMatch9.5.2p2
ORiscbindMatch9.5.2p3
ORiscbindMatch9.5.2p4
ORiscbindMatch9.5.2rc1
ORiscbindMatch9.5.3b1
ORiscbindMatch9.5.3rc1
ORiscbindMatch9.6esv
ORiscbindMatch9.6r1esv
ORiscbindMatch9.6r2esv
ORiscbindMatch9.6r3esv
ORiscbindMatch9.6r4esv
ORiscbindMatch9.6r4_p1esv
ORiscbindMatch9.6r5esv
ORiscbindMatch9.6r5_b1esv
ORiscbindMatch9.6r5_p1esv
ORiscbindMatch9.6r6esv
ORiscbindMatch9.6r6_b1esv
ORiscbindMatch9.6r6_rc1esv
ORiscbindMatch9.6r6_rc2esv
ORiscbindMatch9.6r7esv
ORiscbindMatch9.6r7_p1esv
ORiscbindMatch9.6r7_p2esv
ORiscbindMatch9.6r9esv
ORiscbindMatch9.6r9_p1esv
ORiscbindMatch9.6.0
ORiscbindMatch9.6.0a1
ORiscbindMatch9.6.0b1
ORiscbindMatch9.6.0p1
ORiscbindMatch9.6.0rc1
ORiscbindMatch9.6.0rc2
ORiscbindMatch9.6.1
ORiscbindMatch9.6.1b1
ORiscbindMatch9.6.1p1
ORiscbindMatch9.6.1p2
ORiscbindMatch9.6.1p3
ORiscbindMatch9.6.1rc1
ORiscbindMatch9.6.2
ORiscbindMatch9.6.2b1
ORiscbindMatch9.6.2p1
ORiscbindMatch9.6.2p2
ORiscbindMatch9.6.2p3
ORiscbindMatch9.6.2rc1
ORiscbindMatch9.6.3
ORiscbindMatch9.6.3b1
ORiscbindMatch9.6.3rc1
ORiscbindMatch9.7.0
ORiscbindMatch9.7.0a1
ORiscbindMatch9.7.0a2
ORiscbindMatch9.7.0a3
ORiscbindMatch9.7.0b1
ORiscbindMatch9.7.0b2
ORiscbindMatch9.7.0b3
ORiscbindMatch9.7.0p1
ORiscbindMatch9.7.0p2
ORiscbindMatch9.7.0rc1
ORiscbindMatch9.7.0rc2
ORiscbindMatch9.7.1
ORiscbindMatch9.7.1b1
ORiscbindMatch9.7.1p1
ORiscbindMatch9.7.1p2
ORiscbindMatch9.7.1rc1
ORiscbindMatch9.7.2
ORiscbindMatch9.7.2p1
ORiscbindMatch9.7.2p2
ORiscbindMatch9.7.2p3
ORiscbindMatch9.7.2rc1
ORiscbindMatch9.7.3
ORiscbindMatch9.7.3b1
ORiscbindMatch9.8.0
ORiscbindMatch9.8.0a1
ORiscbindMatch9.8.0b1
ORiscbindMatch9.8.0p1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| isc | bind | 9.5.0 | cpe:/a:isc:bind:9.5.0:a5:: |
| isc | bind | 9.7.0 | cpe:/a:isc:bind:9.7.0:a1:: |
| isc | bind | 9.8.0 | cpe:/a:isc:bind:9.8.0::: |
| isc | bind | 9.2.7 | cpe:/a:isc:bind:9.2.7::: |
| isc | bind | 9.4 | cpe:/a:isc:bind:9.4::: |
| isc | bind | 9.4.0 | cpe:/a:isc:bind:9.4.0:a1:: |
| isc | bind | 9.7.0 | cpe:/a:isc:bind:9.7.0:p1:: |
| isc | bind | 9.5.3 | cpe:/a:isc:bind:9.5.3:b1:: |
| isc | bind | 9.6.1 | cpe:/a:isc:bind:9.6.1:p3:: |
| isc | bind | 9.6.3 | cpe:/a:isc:bind:9.6.3:b1:: |
References
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
marc.info/?l=bugtraq&m=142180687100892&w=2
osvdb.org/72540
secunia.com/advisories/44677
secunia.com/advisories/44719
secunia.com/advisories/44741
secunia.com/advisories/44744
secunia.com/advisories/44758
secunia.com/advisories/44762
secunia.com/advisories/44783
secunia.com/advisories/44929
security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.685026
support.apple.com/kb/HT5002
www.debian.org/security/2011/dsa-2244
www.kb.cert.org/vuls/id/795694
www.mandriva.com/security/advisories?name=MDVSA-2011:104
www.redhat.com/support/errata/RHSA-2011-0845.html
www.securityfocus.com/bid/48007
www.securitytracker.com/id?1025572
bugzilla.redhat.com/show_bug.cgi?id=708301
hermes.opensuse.org/messages/8699912
www.isc.org/software/bind/advisories/cve-2011-1910
Related
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-11:02.bind.asc)
2011-08-03 00:00:00
Fedora Update for bind FEDORA-2011-7617
2011-07-12 00:00:00
CentOS Update for bind97 CESA-2011:0845 centos5 x86_64
2012-07-30 00:00:00
nessus
nessus
RHEL 5 / 6 : bind (RHSA-2011:0845)
2011-06-01 00:00:00
FreeBSD : BIND -- Large RRSIG RRsets and Negative Caching DoS (1e1421f0-8d6f-11e0-89b4-001ec9578670)
2011-06-07 00:00:00
Scientific Linux Security Update : bind on SL6.x i386/x86_64
2012-08-01 00:00:00
osv
osv
bind9 - wrong boundary condition
2011-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: bind-9.8.0-5.P2.fc15
2011-06-02 19:04:32
[SECURITY] Fedora 14 Update: bind-9.7.4-0.2.b1.fc14
2011-06-11 04:31:03
[SECURITY] Fedora 15 Update: bind-9.8.1-3.P1.fc15
2011-11-25 23:25:02
checkpoint_advisories
checkpoint_advisories
ISC BIND RRSIG RRsets Denial of Service (CVE-2011-1910)
2011-07-15 00:00:00
freebsd
freebsd
BIND -- Large RRSIG RRsets and Negative Caching DoS
2011-05-26 00:00:00
securityvulns
securityvulns
ISC bind named DNS server DoS
2011-05-30 00:00:00
FreeBSD Security Advisory FreeBSD-SA-11:02.bind
2011-05-30 00:00:00
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
2011-10-16 00:00:00
cvelist
cvelist
CVE-2011-1910
2011-05-31 20:00:00
cert
cert
ISC BIND named negative caching vulnerability
2011-05-27 00:00:00
suse
suse
bind (important)
2011-06-10 15:31:38
redhat
redhat
(RHSA-2011:0845) Important: bind security update
2011-05-31 00:00:00
slackware
slackware
[slackware-security] bind
2011-05-28 01:14:25
[slackware-security] bind
2011-08-13 00:34:14
debiancve
debiancve
CVE-2011-1910
2011-05-31 20:55:02
prion
prion
Design/Logic Flaw
2011-05-31 20:55:00
centos
centos
bind97 security update
2011-05-31 17:03:46
freebsd_advisory
freebsd_advisory
FreeBSD-SA-11:02.bind
2011-05-28 00:00:00
seebug
seebug
ISC BIND 9 Large RRSIG RRsets远程拒绝服务漏洞
2011-06-02 00:00:00
f5
f5
SOL12985 - BIND vulnerability CVE-2011-1910
2011-07-26 00:00:00
K12985 : BIND vulnerability CVE-2011-1910
2013-09-11 00:00:00
debian
debian
[SECURITY] [DSA 2244-1] bind9 security update
2011-05-27 22:23:27
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:14
ubuntucve
ubuntucve
CVE-2011-1910
2011-05-30 00:00:00
oraclelinux
oraclelinux
bind security update
2011-05-31 00:00:00
bind security update
2011-11-17 00:00:00
nvd
nvd
CVE-2011-1910
2011-05-31 20:55:02
cisa
cisa
Internet System Consortium releases BIND patches
2011-05-27 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2011-05-30 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2012-06-02 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
8.1
Confidence
High
EPSS
0.943
Percentile
99.2%
Related for CVE-2011-1910