CVE-2011-1910

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
iscbind
9.0
iscbind
9.0.0:rc1
iscbind
9.0.0:rc2
iscbind
9.0.0:rc3
iscbind
9.0.0:rc4
iscbind
9.0.0:rc5
iscbind
9.0.0:rc6
iscbind
9.0.1
iscbind
9.0.1:rc1
iscbind
9.0.1:rc2
iscbind
9.1
iscbind
9.1.0:rc1
iscbind
9.1.1
iscbind
9.1.1:rc1
iscbind
9.1.1:rc2
iscbind
9.1.1:rc3
iscbind
9.1.1:rc4
iscbind
9.1.1:rc5
iscbind
9.1.1:rc6
iscbind
9.1.1:rc7
iscbind
9.1.2
iscbind
9.1.2:rc1
iscbind
9.1.3
iscbind
9.1.3:rc1
iscbind
9.1.3:rc2
iscbind
9.1.3:rc3
iscbind
9.2
iscbind
9.2.0
iscbind
9.2.0:a1
iscbind
9.2.0:a2
iscbind
9.2.0:a3
iscbind
9.2.0:b1
iscbind
9.2.0:b2
iscbind
9.2.0:rc1
iscbind
9.2.0:rc10
iscbind
9.2.0:rc2
iscbind
9.2.0:rc3
iscbind
9.2.0:rc4
iscbind
9.2.0:rc5
iscbind
9.2.0:rc6
iscbind
9.2.0:rc7
iscbind
9.2.0:rc8
iscbind
9.2.0:rc9
iscbind
9.2.1
iscbind
9.2.1:rc1
iscbind
9.2.1:rc2
iscbind
9.2.2
iscbind
9.2.2:p2
iscbind
9.2.2:p3
iscbind
9.2.2:rc1
iscbind
9.2.3
iscbind
9.2.3:rc1
iscbind
9.2.3:rc2
iscbind
9.2.3:rc3
iscbind
9.2.3:rc4
iscbind
9.2.4
iscbind
9.2.4:rc2
iscbind
9.2.4:rc3
iscbind
9.2.4:rc4
iscbind
9.2.4:rc5
iscbind
9.2.4:rc6
iscbind
9.2.4:rc7
iscbind
9.2.4:rc8
iscbind
9.2.5
iscbind
9.2.5:b2
iscbind
9.2.5:rc1
iscbind
9.2.6
iscbind
9.2.6:rc1
iscbind
9.2.7
iscbind
9.2.7:rc1
iscbind
9.2.7:rc2
iscbind
9.2.7:rc3
iscbind
9.2.8
iscbind
9.2.9
iscbind
9.2.9:rc1
iscbind
9.3
iscbind
9.3.0
iscbind
9.3.0:b2
iscbind
9.3.0:b3
iscbind
9.3.0:b4
iscbind
9.3.0:rc1
iscbind
9.3.0:rc2
iscbind
9.3.0:rc3
iscbind
9.3.0:rc4
iscbind
9.3.1
iscbind
9.3.1:b2
iscbind
9.3.1:rc1
iscbind
9.3.2
iscbind
9.3.2:rc1
iscbind
9.3.3
iscbind
9.3.3:rc1
iscbind
9.3.3:rc2
iscbind
9.3.3:rc3
iscbind
9.3.4
iscbind
9.3.5
iscbind
9.3.5:p2_w1
iscbind
9.3.5:rc1
iscbind
9.3.5:rc2
iscbind
9.3.6
iscbind
9.3.6:rc1
iscbind
9.4
iscbind
9.4
iscbind
9.4:b1
iscbind
9.4:r1
iscbind
9.4:r2
iscbind
9.4:r3
iscbind
9.4:r4
iscbind
9.4:r4-p1
iscbind
9.4:r5
iscbind
9.4:r5-b1
iscbind
9.4:r5-p1
iscbind
9.4:r5-rc1
iscbind
9.4.0
iscbind
9.4.0:a1
iscbind
9.4.0:a2
iscbind
9.4.0:a3
iscbind
9.4.0:a4
iscbind
9.4.0:a5
iscbind
9.4.0:a6
iscbind
9.4.0:b1
iscbind
9.4.0:b2
iscbind
9.4.0:b3
iscbind
9.4.0:b4
iscbind
9.4.0:rc1
iscbind
9.4.0:rc2
iscbind
9.4.1
iscbind
9.4.2
iscbind
9.4.2:p2_w1
iscbind
9.4.2:rc1
iscbind
9.4.2:rc2
iscbind
9.4.3
iscbind
9.4.3:b1
iscbind
9.4.3:b2
iscbind
9.4.3:b3
iscbind
9.4.3:p1
iscbind
9.4.3:p2
iscbind
9.4.3:p3
iscbind
9.4.3:p4
iscbind
9.4.3:p5
iscbind
9.4.3:rc1
iscbind
9.5
iscbind
9.5.0
iscbind
9.5.0:a1
iscbind
9.5.0:a2
iscbind
9.5.0:a3
iscbind
9.5.0:a4
iscbind
9.5.0:a5
iscbind
9.5.0:a6
iscbind
9.5.0:a7
iscbind
9.5.0:b1
iscbind
9.5.0:b2
iscbind
9.5.0:b3
iscbind
9.5.0:p1
iscbind
9.5.0:p2
iscbind
9.5.0:p2_w1
iscbind
9.5.0:p2_w2
iscbind
9.5.0:rc1
iscbind
9.5.1
iscbind
9.5.1:b1
iscbind
9.5.1:b2
iscbind
9.5.1:b3
iscbind
9.5.1:rc1
iscbind
9.5.1:rc2
iscbind
9.5.2
iscbind
9.5.2:b1
iscbind
9.5.2:p1
iscbind
9.5.2:p2
iscbind
9.5.2:p3
iscbind
9.5.2:p4
iscbind
9.5.2:rc1
iscbind
9.5.3:b1
iscbind
9.5.3:rc1
iscbind
9.6
iscbind
9.6:r1
iscbind
9.6:r2
iscbind
9.6:r3
iscbind
9.6:r4
iscbind
9.6:r4_p1
iscbind
9.6:r5
iscbind
9.6:r5_b1
iscbind
9.6:r5_p1
iscbind
9.6:r6
iscbind
9.6:r6_b1
iscbind
9.6:r6_rc1
iscbind
9.6:r6_rc2
iscbind
9.6:r7
iscbind
9.6:r7_p1
iscbind
9.6:r7_p2
iscbind
9.6:r9
iscbind
9.6:r9_p1
iscbind
9.6.0
iscbind
9.6.0:a1
iscbind
9.6.0:b1
iscbind
9.6.0:p1
iscbind
9.6.0:rc1
iscbind
9.6.0:rc2
iscbind
9.6.1
iscbind
9.6.1:b1
iscbind
9.6.1:p1
iscbind
9.6.1:p2
iscbind
9.6.1:p3
iscbind
9.6.1:rc1
iscbind
9.6.2
iscbind
9.6.2:b1
iscbind
9.6.2:p1
iscbind
9.6.2:p2
iscbind
9.6.2:p3
iscbind
9.6.2:rc1
iscbind
9.6.3
iscbind
9.6.3:b1
iscbind
9.6.3:rc1
iscbind
9.7.0
iscbind
9.7.0:a1
iscbind
9.7.0:a2
iscbind
9.7.0:a3
iscbind
9.7.0:b1
iscbind
9.7.0:b2
iscbind
9.7.0:b3
iscbind
9.7.0:p1
iscbind
9.7.0:p2
iscbind
9.7.0:rc1
iscbind
9.7.0:rc2
iscbind
9.7.1
iscbind
9.7.1:b1
iscbind
9.7.1:p1
iscbind
9.7.1:p2
iscbind
9.7.1:rc1
iscbind
9.7.2
iscbind
9.7.2:p1
iscbind
9.7.2:p2
iscbind
9.7.2:p3
iscbind
9.7.2:rc1
iscbind
9.7.3
iscbind
9.7.3:b1
iscbind
9.8.0
iscbind
9.8.0:a1
iscbind
9.8.0:b1
iscbind
9.8.0:p1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
natty
Fixed 1:9.7.3.dfsg-1ubuntu2.1
released
maverick
Fixed 1:9.7.1.dfsg.P2-2ubuntu0.3
released
lucid
Fixed 1:9.7.0.dfsg.P1-1ubuntu0.2
released
hardy
Fixed 1:9.4.2.dfsg.P2-2ubuntu0.7
released
dapper
ignored
Common Weakness Enumeration
References
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://osvdb.org/72540
http://secunia.com/advisories/44677
http://secunia.com/advisories/44719
http://secunia.com/advisories/44741
http://secunia.com/advisories/44744
http://secunia.com/advisories/44758
http://secunia.com/advisories/44762
http://secunia.com/advisories/44783
http://secunia.com/advisories/44929
http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.685026
http://support.apple.com/kb/HT5002
http://www.debian.org/security/2011/dsa-2244
http://www.kb.cert.org/vuls/id/795694
http://www.mandriva.com/security/advisories?name=MDVSA-2011:104
http://www.redhat.com/support/errata/RHSA-2011-0845.html
http://www.securityfocus.com/bid/48007
http://www.securitytracker.com/id?1025572
https://bugzilla.redhat.com/show_bug.cgi?id=708301
https://hermes.opensuse.org/messages/8699912
https://www.isc.org/software/bind/advisories/cve-2011-1910
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://osvdb.org/72540
http://secunia.com/advisories/44677
http://secunia.com/advisories/44719
http://secunia.com/advisories/44741
http://secunia.com/advisories/44744
http://secunia.com/advisories/44758
http://secunia.com/advisories/44762
http://secunia.com/advisories/44783
http://secunia.com/advisories/44929
http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.685026
http://support.apple.com/kb/HT5002
http://www.debian.org/security/2011/dsa-2244
http://www.kb.cert.org/vuls/id/795694
http://www.mandriva.com/security/advisories?name=MDVSA-2011:104
http://www.redhat.com/support/errata/RHSA-2011-0845.html
http://www.securityfocus.com/bid/48007
http://www.securitytracker.com/id?1025572
https://bugzilla.redhat.com/show_bug.cgi?id=708301
https://hermes.opensuse.org/messages/8699912
https://www.isc.org/software/bind/advisories/cve-2011-1910