CVE-2011-1910: Medium severity isc bind 9 vulnerability

Published May 27, 2011

Updated

Common Vulnerabilities and Exposures assigned an identifier CVE-2011-1910 to the following vulnerability:

A BIND 9 DNS server set up to be a caching resolver is vulnerable to a user querying a domain with very large resource record sets (RRSets) when trying to negatively cache a response. This can cause the BIND 9 DNS server (named process) to crash.

http://www.isc.org/software/bind/advisories/cve-2011-1910

Other sources

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.

— MITRE

Affected Software

238 affected components

ISC BIND=9.0

ISC BIND=9.0.0-rc1

ISC BIND=9.0.0-rc2

ISC BIND=9.0.0-rc3

ISC BIND=9.0.0-rc4

ISC BIND=9.0.0-rc5

ISC BIND=9.0.0-rc6

ISC BIND=9.0.1

ISC BIND=9.0.1-rc1

ISC BIND=9.0.1-rc2

ISC BIND=9.1

ISC BIND=9.1.0-rc1

ISC BIND=9.1.1

ISC BIND=9.1.1-rc1

ISC BIND=9.1.1-rc2

ISC BIND=9.1.1-rc3

ISC BIND=9.1.1-rc4

ISC BIND=9.1.1-rc5

ISC BIND=9.1.1-rc6

ISC BIND=9.1.1-rc7

ISC BIND=9.1.2

ISC BIND=9.1.2-rc1

ISC BIND=9.1.3

ISC BIND=9.1.3-rc1

ISC BIND=9.1.3-rc2

ISC BIND=9.1.3-rc3

ISC BIND=9.2

ISC BIND=9.2.0

ISC BIND=9.2.0-a1

ISC BIND=9.2.0-a2

ISC BIND=9.2.0-a3

ISC BIND=9.2.0-b1

ISC BIND=9.2.0-b2

ISC BIND=9.2.0-rc1

ISC BIND=9.2.0-rc10

ISC BIND=9.2.0-rc2

ISC BIND=9.2.0-rc3

ISC BIND=9.2.0-rc4

ISC BIND=9.2.0-rc5

ISC BIND=9.2.0-rc6

ISC BIND=9.2.0-rc7

ISC BIND=9.2.0-rc8

ISC BIND=9.2.0-rc9

ISC BIND=9.2.1

ISC BIND=9.2.1-rc1

ISC BIND=9.2.1-rc2

ISC BIND=9.2.2

ISC BIND=9.2.2-p2

ISC BIND=9.2.2-p3

ISC BIND=9.2.2-rc1

ISC BIND=9.2.3

ISC BIND=9.2.3-rc1

ISC BIND=9.2.3-rc2

ISC BIND=9.2.3-rc3

ISC BIND=9.2.3-rc4

ISC BIND=9.2.4

ISC BIND=9.2.4-rc2

ISC BIND=9.2.4-rc3

ISC BIND=9.2.4-rc4

ISC BIND=9.2.4-rc5

ISC BIND=9.2.4-rc6

ISC BIND=9.2.4-rc7

ISC BIND=9.2.4-rc8

ISC BIND=9.2.5

ISC BIND=9.2.5-b2

ISC BIND=9.2.5-rc1

ISC BIND=9.2.6

ISC BIND=9.2.6-rc1

ISC BIND=9.2.7

ISC BIND=9.2.7-rc1

ISC BIND=9.2.7-rc2

ISC BIND=9.2.7-rc3

ISC BIND=9.2.8

ISC BIND=9.2.9

ISC BIND=9.2.9-rc1

ISC BIND=9.3

ISC BIND=9.3.0

ISC BIND=9.3.0-b2

ISC BIND=9.3.0-b3

ISC BIND=9.3.0-b4

ISC BIND=9.3.0-rc1

ISC BIND=9.3.0-rc2

ISC BIND=9.3.0-rc3

ISC BIND=9.3.0-rc4

ISC BIND=9.3.1

ISC BIND=9.3.1-b2

ISC BIND=9.3.1-rc1

ISC BIND=9.3.2

ISC BIND=9.3.2-rc1

ISC BIND=9.3.3

ISC BIND=9.3.3-rc1

ISC BIND=9.3.3-rc2

ISC BIND=9.3.3-rc3

ISC BIND=9.3.4

ISC BIND=9.3.5

ISC BIND=9.3.5-p2_w1

ISC BIND=9.3.5-rc1

ISC BIND=9.3.5-rc2

ISC BIND=9.3.6

ISC BIND=9.3.6-rc1

ISC BIND=9.4

ISC BIND=9.4-b1

ISC BIND=9.4-r1

ISC BIND=9.4-r2

ISC BIND=9.4-r3

ISC BIND=9.4-r4

ISC BIND=9.4-r4-p1

ISC BIND=9.4-r5

ISC BIND=9.4-r5-b1

ISC BIND=9.4-r5-p1

ISC BIND=9.4-r5-rc1

ISC BIND=9.4.0

ISC BIND=9.4.0-a1

ISC BIND=9.4.0-a2

ISC BIND=9.4.0-a3

ISC BIND=9.4.0-a4

ISC BIND=9.4.0-a5

ISC BIND=9.4.0-a6

ISC BIND=9.4.0-b1

ISC BIND=9.4.0-b2

ISC BIND=9.4.0-b3

ISC BIND=9.4.0-b4

ISC BIND=9.4.0-rc1

ISC BIND=9.4.0-rc2

ISC BIND=9.4.1

ISC BIND=9.4.2

ISC BIND=9.4.2-p2_w1

ISC BIND=9.4.2-rc1

ISC BIND=9.4.2-rc2

ISC BIND=9.4.3

ISC BIND=9.4.3-b1

ISC BIND=9.4.3-b2

ISC BIND=9.4.3-b3

ISC BIND=9.4.3-p1

ISC BIND=9.4.3-p2

ISC BIND=9.4.3-p3

ISC BIND=9.4.3-p4

ISC BIND=9.4.3-p5

ISC BIND=9.4.3-rc1

ISC BIND=9.5

ISC BIND=9.5.0

ISC BIND=9.5.0-a1

ISC BIND=9.5.0-a2

ISC BIND=9.5.0-a3

ISC BIND=9.5.0-a4

ISC BIND=9.5.0-a5

ISC BIND=9.5.0-a6

ISC BIND=9.5.0-a7

ISC BIND=9.5.0-b1

ISC BIND=9.5.0-b2

ISC BIND=9.5.0-b3

ISC BIND=9.5.0-p1

ISC BIND=9.5.0-p2

ISC BIND=9.5.0-p2_w1

ISC BIND=9.5.0-p2_w2

ISC BIND=9.5.0-rc1

ISC BIND=9.5.1

ISC BIND=9.5.1-b1

ISC BIND=9.5.1-b2

ISC BIND=9.5.1-b3

ISC BIND=9.5.1-rc1

ISC BIND=9.5.1-rc2

ISC BIND=9.5.2

ISC BIND=9.5.2-b1

ISC BIND=9.5.2-p1

ISC BIND=9.5.2-p2

ISC BIND=9.5.2-p3

ISC BIND=9.5.2-p4

ISC BIND=9.5.2-rc1

ISC BIND=9.5.3-b1

ISC BIND=9.5.3-rc1

ISC BIND=9.6

ISC BIND=9.6-r1

ISC BIND=9.6-r2

ISC BIND=9.6-r3

ISC BIND=9.6-r4

ISC BIND=9.6-r4_p1

ISC BIND=9.6-r5

ISC BIND=9.6-r5_b1

ISC BIND=9.6-r5_p1

ISC BIND=9.6-r6

ISC BIND=9.6-r6_b1

ISC BIND=9.6-r6_rc1

ISC BIND=9.6-r6_rc2

ISC BIND=9.6-r7

ISC BIND=9.6-r7_p1

ISC BIND=9.6-r7_p2

ISC BIND=9.6-r9

ISC BIND=9.6-r9_p1

ISC BIND=9.6.0

ISC BIND=9.6.0-a1

ISC BIND=9.6.0-b1

ISC BIND=9.6.0-p1

ISC BIND=9.6.0-rc1

ISC BIND=9.6.0-rc2

ISC BIND=9.6.1

ISC BIND=9.6.1-b1

ISC BIND=9.6.1-p1

ISC BIND=9.6.1-p2

ISC BIND=9.6.1-p3

ISC BIND=9.6.1-rc1

ISC BIND=9.6.2

ISC BIND=9.6.2-b1

ISC BIND=9.6.2-p1

ISC BIND=9.6.2-p2

ISC BIND=9.6.2-p3

ISC BIND=9.6.2-rc1

ISC BIND=9.6.3

ISC BIND=9.6.3-b1

ISC BIND=9.6.3-rc1

ISC BIND=9.7.0

ISC BIND=9.7.0-a1

ISC BIND=9.7.0-a2

ISC BIND=9.7.0-a3

ISC BIND=9.7.0-b1

ISC BIND=9.7.0-b2

ISC BIND=9.7.0-b3

ISC BIND=9.7.0-p1

ISC BIND=9.7.0-p2

ISC BIND=9.7.0-rc1

ISC BIND=9.7.0-rc2

ISC BIND=9.7.1

ISC BIND=9.7.1-b1

ISC BIND=9.7.1-p1

ISC BIND=9.7.1-p2

ISC BIND=9.7.1-rc1

ISC BIND=9.7.2

ISC BIND=9.7.2-p1

ISC BIND=9.7.2-p2

ISC BIND=9.7.2-p3

ISC BIND=9.7.2-rc1

ISC BIND=9.7.3

ISC BIND=9.7.3-b1

ISC BIND=9.8.0

ISC BIND=9.8.0-a1

ISC BIND=9.8.0-b1

ISC BIND=9.8.0-p1

Event History

May 27, 2011

Data Sourced

08:08 AM

DescriptionSeverityAffected Software

May 31, 2011

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1910?

The severity of CVE-2011-1910 is classified as high due to its potential to allow remote code execution.

How do I fix CVE-2011-1910?

To fix CVE-2011-1910, upgrade your BIND version to 9.7.2 or later, or apply the appropriate patch provided by ISC.

What software versions are affected by CVE-2011-1910?

CVE-2011-1910 affects several versions of ISC BIND, including 9.6.1, 9.6.2, and earlier.

Is it safe to continue using software affected by CVE-2011-1910?

It is not safe to continue using affected software until it has been updated or patched to mitigate the vulnerability.

What type of attacks could exploit CVE-2011-1910?

CVE-2011-1910 can be exploited through crafted DNS queries that trigger a denial of service or remote code execution, impacting system availability.