CVE-2011-1910

MEDIUM 5.0CVE-2011-1910 · Published 31/05/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
bind isc	`= 9.0= 9.0.0= 9.0.1= 9.1= 9.1.0= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.2.0= 9.2.1= 9.2.2= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.2.8= 9.2.9= 9.3= 9.3.0= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.4= 9.4.0= 9.4.1= 9.4.2= 9.4.3= 9.5= 9.5.0= 9.5.1= 9.5.2= 9.5.3= 9.6= 9.6.0= 9.6.1= 9.6.2= 9.6.3= 9.7.0= 9.7.1= 9.7.2= 9.7.3= 9.8.0`	No fix yet

Description

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
marc.info
osvdb.org/72540
secunia.com/advisories/44677
secunia.com/advisories/44719 · Vendor Advisory
secunia.com/advisories/44741
secunia.com/advisories/44744
secunia.com/advisories/44758
secunia.com/advisories/44762
secunia.com/advisories/44783
secunia.com/advisories/44929
security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
slackware.com/security/viewer.php
support.apple.com/kb/HT5002
debian.org/security/2011/dsa-2244
kb.cert.org/vuls/id/795694 · US Government Resource
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2011-0845.html
securityfocus.com/bid/48007
securitytracker.com/id
bugzilla.redhat.com/show_bug.cgi
hermes.opensuse.org/messages/8699912
isc.org/software/bind/advisories/cve-2011-1910 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free