5 - CVE-2011-1910

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2011-1910	First vendor Publication	2011-05-31
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12791

Oval ID:	oval:org.mitre.oval:def:12791
Title:	DSA-2244-1 bind9 -- incorrect boundary condition
Description:	It was discovered that BIND, an implementation of the DNS protocol, does not correctly process certain large RRSIG record sets in DNSSEC responses. The resulting assertion failure causes the name server process to crash, making name resolution unavailable. In addition, this update fixes handling of certain signed/unsigned zone combinations when a DLV service is used. Previously, data from certain affected zones could become unavailable from the resolver.
Family:	unix	Class:	patch
Reference(s):	DSA-2244-1 CVE-2011-1910	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	bind9
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND bind9 DPKG is earlier than 1:9.6.ESV.R4+dfsg-0+lenny2 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND bind9 DPKG is earlier than 1:9.7.3.dfsg-1~squeeze2

Definition Id: oval:org.mitre.oval:def:13154

Oval ID:	oval:org.mitre.oval:def:13154
Title:	USN-1139-1 -- bind9 vulnerabilities
Description:	bind9: Internet Domain Name Server An attacker could send crafted input to Bind and cause it to crash.
Family:	unix	Class:	patch
Reference(s):	USN-1139-1 CVE-2010-3762 CVE-2011-1910	Version:	5
Platform(s):	Ubuntu 10.10 Ubuntu 8.04 Ubuntu 10.04	Product(s):	bind9
Definition Synopsis:
Release section Ubuntu 10.10 is installed AND Installed architecture is all AND libdns66 DPKG is earlier than 1:9.7.1.dfsg.P2-2ubuntu0.3 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND libdns36 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.7 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND libdns64 DPKG is earlier than 1:9.7.0.dfsg.P1-1ubuntu0.2

Definition Id: oval:org.mitre.oval:def:21740

Oval ID:	oval:org.mitre.oval:def:21740
Title:	RHSA-2011:0845: bind security update (Important)
Description:	Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0845-01 CVE-2011-1910 CESA-2011:0845-CentOS 5	Version:	6
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	bind97 bind
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section bind97 is earlier than 32:9.7.0-6.P2.el5_6.2 AND bind97-chroot is earlier than 32:9.7.0-6.P2.el5_6.2 AND bind97-devel is earlier than 32:9.7.0-6.P2.el5_6.2 AND bind97-libs is earlier than 32:9.7.0-6.P2.el5_6.2 AND bind97-utils is earlier than 32:9.7.0-6.P2.el5_6.2 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section bind is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-chroot is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-debuginfo is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-devel is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-libs is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-sdb is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-utils is earlier than 32:9.7.3-2.el6_1.P1.1

Definition Id: oval:org.mitre.oval:def:23394

Oval ID:	oval:org.mitre.oval:def:23394
Title:	ELSA-2011:0845: bind security update (Important)
Description:	Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0845-01 CVE-2011-1910	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	bind97 bind
Definition Synopsis:
Oracle Linux 6.x rpm test bind is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-chroot is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-sdb is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-libs is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-utils is earlier than 32:9.7.3-2.el6_1.P1.1 AND bind-devel is earlier than 32:9.7.3-2.el6_1.P1.1

Definition Id: oval:org.mitre.oval:def:27836

Oval ID:	oval:org.mitre.oval:def:27836
Title:	DEPRECATED: ELSA-2011-0845 -- bind security update (important)
Description:	[32:9.7.3-2.1.P1] - update to 9.7.3-P1 (CVE-2011-1910)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0845 CVE-2011-1910	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	bind97 bind
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section bind97 is earlier than 0:9.7.0-6.P2.el5_6.2 AND bind97-chroot is earlier than 0:9.7.0-6.P2.el5_6.2 AND bind97-devel is earlier than 0:9.7.0-6.P2.el5_6.2 AND bind97-libs is earlier than 0:9.7.0-6.P2.el5_6.2 AND bind97-utils is earlier than 0:9.7.0-6.P2.el5_6.2 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section bind is earlier than 0:9.7.3-2.el6_1.P1.1 AND bind-chroot is earlier than 0:9.7.3-2.el6_1.P1.1 AND bind-devel is earlier than 0:9.7.3-2.el6_1.P1.1 AND bind-libs is earlier than 0:9.7.3-2.el6_1.P1.1 AND bind-sdb is earlier than 0:9.7.3-2.el6_1.P1.1 AND bind-utils is earlier than 0:9.7.3-2.el6_1.P1.1

Definition Id: oval:org.mitre.oval:def:28361

Oval ID:	oval:org.mitre.oval:def:28361
Title:	HP-UX Running BIND Remote Denial of Service (DoS)
Description:	Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-1910	Version:	7
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
HP-UX B.11.31 AND filesets test NameService.BIND-AUX version is less than C.9.7.3.6.0 AND NameService.BIND-RUN version is less than C.9.7.3.6.0

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:2.3:a:isc:bind:9.8.0::::-::: cpe:2.3:a:isc:bind:9.8.0:p1:::-:::* cpe:2.3:a:isc:bind:9.8.0:b1:::-:::* cpe:2.3:a:isc:bind:9.8.0:a1:::-:::* cpe:2.3:a:isc:bind:9.7.3::::-::: cpe:2.3:a:isc:bind:9.7.3:b1:::-:::* cpe:2.3:a:isc:bind:9.7.2::::-::: cpe:2.3:a:isc:bind:9.7.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.2:p3:::-:::* cpe:2.3:a:isc:bind:9.7.2:p1:::-:::* cpe:2.3:a:isc:bind:9.7.2:p2:::-:::* cpe:2.3:a:isc:bind:9.7.1::::-::: cpe:2.3:a:isc:bind:9.7.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.1:p1:::-:::* cpe:2.3:a:isc:bind:9.7.1:p2:::-:::* cpe:2.3:a:isc:bind:9.7.1:b1:::-:::* cpe:2.3:a:isc:bind:9.7.0:p1:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.0::::-::: cpe:2.3:a:isc:bind:9.7.0:p2:::-:::* cpe:2.3:a:isc:bind:9.7.0:b1:::-:::* cpe:2.3:a:isc:bind:9.7.0:b3:::-:::* cpe:2.3:a:isc:bind:9.7.0:b2:::-:::* cpe:2.3:a:isc:bind:9.7.0:a3:::-:::* cpe:2.3:a:isc:bind:9.7.0:a2:::-:::* cpe:2.3:a:isc:bind:9.7.0:a1:::-:::* cpe:2.3:a:isc:bind:9.6.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.3::::-::: cpe:2.3:a:isc:bind:9.6.3:b1:::-:::* cpe:2.3:a:isc:bind:9.6.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.2::::-::: cpe:2.3:a:isc:bind:9.6.2:b1:::-:::* cpe:2.3:a:isc:bind:9.6.2:p3:::-:::* cpe:2.3:a:isc:bind:9.6.2:p2:::-:::* cpe:2.3:a:isc:bind:9.6.2:p1:::-:::* cpe:2.3:a:isc:bind:9.6.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.1:p2:::-:::* cpe:2.3:a:isc:bind:9.6.1:p1:::-:::* cpe:2.3:a:isc:bind:9.6.1::::-::: cpe:2.3:a:isc:bind:9.6.1:p3:::-:::* cpe:2.3:a:isc:bind:9.6.1:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.6.0:p1:::-:::* cpe:2.3:a:isc:bind:9.6.0::::-::: cpe:2.3:a:isc:bind:9.6.0:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:a1:::-:::* cpe:2.3:a:isc:bind:9.6:r6_b1:::esv:::* cpe:2.3:a:isc:bind:9.6:r9_p1:::esv:::* cpe:2.3:a:isc:bind:9.6:r5:::esv:::* cpe:2.3:a:isc:bind:9.6:r9:::esv:::* cpe:2.3:a:isc:bind:9.6:r2:::esv:::* cpe:2.3:a:isc:bind:9.6:r3:::esv:::* cpe:2.3:a:isc:bind:9.6:r7_p1:::esv:::* cpe:2.3:a:isc:bind:9.6:r4:::esv:::* cpe:2.3:a:isc:bind:9.6:r6_rc1:::esv:::* cpe:2.3:a:isc:bind:9.6:r6_rc2:::esv:::* cpe:2.3:a:isc:bind:9.6:r6:::esv:::* cpe:2.3:a:isc:bind:9.6:r7:::esv:::* cpe:2.3:a:isc:bind:9.6:r7_p2:::esv:::* cpe:2.3:a:isc:bind:9.6:r5_b1:::esv:::* cpe:2.3:a:isc:bind:9.6:r4_p1:::esv:::* cpe:2.3:a:isc:bind:9.6:r1:::esv:::* cpe:2.3:a:isc:bind:9.6::::esv::: cpe:2.3:a:isc:bind:9.6:r5_p1:::esv:::* cpe:2.3:a:isc:bind:9.5.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.3:b1:::-:::* cpe:2.3:a:isc:bind:9.5.2::::-::: cpe:2.3:a:isc:bind:9.5.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.2:b1:::-:::* cpe:2.3:a:isc:bind:9.5.2:p3:::-:::* cpe:2.3:a:isc:bind:9.5.2:p2:::-:::* cpe:2.3:a:isc:bind:9.5.2:p1:::-:::* cpe:2.3:a:isc:bind:9.5.2:p4:::-:::* cpe:2.3:a:isc:bind:9.5.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.5.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.1::::-::: cpe:2.3:a:isc:bind:9.5.1:b1:::-:::* cpe:2.3:a:isc:bind:9.5.1:b3:::-:::* cpe:2.3:a:isc:bind:9.5.1:b2:::-:::* cpe:2.3:a:isc:bind:9.5.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.0::::-::: cpe:2.3:a:isc:bind:9.5.0:b1:::-:::* cpe:2.3:a:isc:bind:9.5.0:b3:::-:::* cpe:2.3:a:isc:bind:9.5.0:b2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2_w2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2_w1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a3:::-:::* cpe:2.3:a:isc:bind:9.5.0:a2:::-:::* cpe:2.3:a:isc:bind:9.5.0:a1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a7:::-:::* cpe:2.3:a:isc:bind:9.5.0:a6:::-:::* cpe:2.3:a:isc:bind:9.5.0:a5:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a4:::-:::* cpe:2.3:a:isc:bind:9.5::::-::: cpe:2.3:a:isc:bind:9.4.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.3::::-::: cpe:2.3:a:isc:bind:9.4.3:p2:::-:::* cpe:2.3:a:isc:bind:9.4.3:b1:::-:::* cpe:2.3:a:isc:bind:9.4.3:b3:::-:::* cpe:2.3:a:isc:bind:9.4.3:b2:::-:::* cpe:2.3:a:isc:bind:9.4.3:p3:::-:::* cpe:2.3:a:isc:bind:9.4.3:p1:::-:::* cpe:2.3:a:isc:bind:9.4.3:p5:::-:::* cpe:2.3:a:isc:bind:9.4.3:p4:::-:::* cpe:2.3:a:isc:bind:9.4.2::::-::: cpe:2.3:a:isc:bind:9.4.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.2:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.2:p2_w1:::-:::* cpe:2.3:a:isc:bind:9.4.1::::-::: cpe:2.3:a:isc:bind:9.4.0::::-::: cpe:2.3:a:isc:bind:9.4.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a6:::-:::* cpe:2.3:a:isc:bind:9.4.0:a5:::-:::* cpe:2.3:a:isc:bind:9.4.0:b4:::-:::* cpe:2.3:a:isc:bind:9.4.0:b3:::-:::* cpe:2.3:a:isc:bind:9.4.0:b2:::-:::* cpe:2.3:a:isc:bind:9.4.0:b1:::-:::* cpe:2.3:a:isc:bind:9.4.0:a4:::-:::* cpe:2.3:a:isc:bind:9.4.0:a3:::-:::* cpe:2.3:a:isc:bind:9.4.0:a2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a1:::-:::* cpe:2.3:a:isc:bind:9.4::::-::: cpe:2.3:a:isc:bind:9.4:r5-b1:::esv:::* cpe:2.3:a:isc:bind:9.4:r1:::esv:::* cpe:2.3:a:isc:bind:9.4:b1:::esv:::* cpe:2.3:a:isc:bind:9.4:r3:::esv:::* cpe:2.3:a:isc:bind:9.4:r4:::esv:::* cpe:2.3:a:isc:bind:9.4:r5:::esv:::* cpe:2.3:a:isc:bind:9.4:r2:::esv:::* cpe:2.3:a:isc:bind:9.4:r4-p1:::esv:::* cpe:2.3:a:isc:bind:9.4::::esv::: cpe:2.3:a:isc:bind:9.4:r5-p1:::esv:::* cpe:2.3:a:isc:bind:9.4:r5-rc1:::esv:::* cpe:2.3:a:isc:bind:9.3.6::::-::: cpe:2.3:a:isc:bind:9.3.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5::::-::: cpe:2.3:a:isc:bind:9.3.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.5:p2_w1:::-:::* cpe:2.3:a:isc:bind:9.3.4::::-::: cpe:2.3:a:isc:bind:9.3.3::::-::: cpe:2.3:a:isc:bind:9.3.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.2::::-::: cpe:2.3:a:isc:bind:9.3.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1::::-::: cpe:2.3:a:isc:bind:9.3.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1:b2:::-:::* cpe:2.3:a:isc:bind:9.3.0::::-::: cpe:2.3:a:isc:bind:9.3.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.0:b4:::-:::* cpe:2.3:a:isc:bind:9.3.0:b3:::-:::* cpe:2.3:a:isc:bind:9.3.0:b2:::-:::* cpe:2.3:a:isc:bind:9.3::::-::: cpe:2.3:a:isc:bind:9.2.9::::-::: cpe:2.3:a:isc:bind:9.2.9:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.8::::-::: cpe:2.3:a:isc:bind:9.2.7::::-::: cpe:2.3:a:isc:bind:9.2.7:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.6::::-::: cpe:2.3:a:isc:bind:9.2.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5::::-::: cpe:2.3:a:isc:bind:9.2.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5:b2:::-:::* cpe:2.3:a:isc:bind:9.2.4::::-::: cpe:2.3:a:isc:bind:9.2.4:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3::::-::: cpe:2.3:a:isc:bind:9.2.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.2::::-::: cpe:2.3:a:isc:bind:9.2.2:p3:::-:::* cpe:2.3:a:isc:bind:9.2.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.2:p2:::-:::* cpe:2.3:a:isc:bind:9.2.1::::-::: cpe:2.3:a:isc:bind:9.2.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0::::-::: cpe:2.3:a:isc:bind:9.2.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc9:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc10:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.0:b1:::-:::* cpe:2.3:a:isc:bind:9.2.0:a1:::-:::* cpe:2.3:a:isc:bind:9.2.0:b2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a3:::-:::* cpe:2.3:a:isc:bind:9.2::::-::: cpe:2.3:a:isc:bind:9.1.3::::-::: cpe:2.3:a:isc:bind:9.1.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.2::::-::: cpe:2.3:a:isc:bind:9.1.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.1::::-::: cpe:2.3:a:isc:bind:9.1.1:rc6:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc7:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc4:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc5:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.1::::-::: cpe:2.3:a:isc:bind:9.0.1::::-::: cpe:2.3:a:isc:bind:9.0.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.0::::-:::	238

OpenVAS Exploits

Date	Description
2012-09-10	Name : Slackware Advisory SSA:2011-147-01 bind File : nvt/esoft_slk_ssa_2011_147_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-224-01 bind File : nvt/esoft_slk_ssa_2011_224_01.nasl
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-01 (bind) File : nvt/glsa_201206_01.nasl
2012-07-30	Name : CentOS Update for bind97 CESA-2011:0845 centos5 x86_64 File : nvt/gb_CESA-2011_0845_bind97_centos5_x86_64.nasl
2012-06-19	Name : Fedora Update for bind FEDORA-2012-8962 File : nvt/gb_fedora_2012_8962_bind_fc15.nasl
2011-11-28	Name : Fedora Update for bind FEDORA-2011-16002 File : nvt/gb_fedora_2011_16002_bind_fc14.nasl
2011-11-28	Name : Fedora Update for bind FEDORA-2011-16036 File : nvt/gb_fedora_2011_16036_bind_fc15.nasl
2011-10-20	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006) File : nvt/gb_macosx_su11-006.nasl
2011-08-09	Name : CentOS Update for bind97 CESA-2011:0845 centos5 i386 File : nvt/gb_CESA-2011_0845_bind97_centos5_i386.nasl
2011-08-03	Name : FreeBSD Security Advisory (FreeBSD-SA-11:02.bind.asc) File : nvt/freebsdsa_bind10.nasl
2011-08-03	Name : Debian Security Advisory DSA 2244-1 (bind9) File : nvt/deb_2244_1.nasl
2011-08-03	Name : FreeBSD Ports: bind9-sdb-ldap, bind9-sdb-postgresql File : nvt/freebsd_bind9-sdb-ldap.nasl
2011-07-27	Name : Fedora Update for bind FEDORA-2011-9127 File : nvt/gb_fedora_2011_9127_bind_fc14.nasl
2011-07-18	Name : Fedora Update for bind FEDORA-2011-9146 File : nvt/gb_fedora_2011_9146_bind_fc15.nasl
2011-07-12	Name : Fedora Update for bind FEDORA-2011-7617 File : nvt/gb_fedora_2011_7617_bind_fc15.nasl
2011-06-20	Name : Fedora Update for bind FEDORA-2011-7621 File : nvt/gb_fedora_2011_7621_bind_fc13.nasl
2011-06-20	Name : Fedora Update for bind FEDORA-2011-7602 File : nvt/gb_fedora_2011_7602_bind_fc14.nasl
2011-06-06	Name : RedHat Update for bind RHSA-2011:0845-01 File : nvt/gb_RHSA-2011_0845-01_bind.nasl
2011-06-06	Name : Mandriva Update for bind MDVSA-2011:104 (bind) File : nvt/gb_mandriva_MDVSA_2011_104.nasl
2011-06-06	Name : Ubuntu Update for bind9 USN-1139-1 File : nvt/gb_ubuntu_USN_1139_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
72540	ISC BIND Caching Resolver Large RRSIG RRsets Negative Caching Remote DoS

Snort® IPS/IDS

Date	Description
2014-01-10	ISC BIND DNSSEC authority response record overflow attempt RuleID : 21421 - Revision : 7 - Type : PROTOCOL-DNS
2014-01-10	ISC BIND DNSSEC authority response record overflow attempt RuleID : 19125 - Revision : 5 - Type : PROTOCOL-DNS

Nessus® Vulnerability Scanner

Date	Description
2017-04-21	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL12985.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_bind-110531.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_bind-110531.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0845.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0845.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_bind_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_bind97_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-01.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_bind-7551.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-006.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_7_2.nasl - Type : ACT_GATHER_INFO
2011-08-15	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-224-01.nasl - Type : ACT_GATHER_INFO
2011-06-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1139-1.nasl - Type : ACT_GATHER_INFO
2011-06-12	Name : The remote Fedora host is missing a security update. File : fedora_2011-7621.nasl - Type : ACT_GATHER_INFO
2011-06-12	Name : The remote Fedora host is missing a security update. File : fedora_2011-7602.nasl - Type : ACT_GATHER_INFO
2011-06-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2244.nasl - Type : ACT_GATHER_INFO
2011-06-07	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_1e1421f08d6f11e089b4001ec9578670.nasl - Type : ACT_GATHER_INFO
2011-06-03	Name : The remote Fedora host is missing a security update. File : fedora_2011-7617.nasl - Type : ACT_GATHER_INFO
2011-06-02	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-104.nasl - Type : ACT_GATHER_INFO
2011-06-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0845.nasl - Type : ACT_GATHER_INFO
2011-05-31	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-147-01.nasl - Type : ACT_GATHER_INFO
2011-05-31	Name : The remote name server may be affected by a denial of service vulnerability. File : bind9_980_p2.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://marc.info/?l=bugtraq&m=142180687100892&w=2
http://osvdb.org/72540
http://secunia.com/advisories/44677
http://secunia.com/advisories/44719
http://secunia.com/advisories/44741
http://secunia.com/advisories/44744
http://secunia.com/advisories/44758
http://secunia.com/advisories/44762
http://secunia.com/advisories/44783
http://secunia.com/advisories/44929
http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&...
http://support.apple.com/kb/HT5002
http://www.debian.org/security/2011/dsa-2244
http://www.kb.cert.org/vuls/id/795694
http://www.mandriva.com/security/advisories?name=MDVSA-2011:104
http://www.redhat.com/support/errata/RHSA-2011-0845.html
http://www.securityfocus.com/bid/48007
http://www.securitytracker.com/id?1025572
https://bugzilla.redhat.com/show_bug.cgi?id=708301
https://hermes.opensuse.org/messages/8699912
https://www.isc.org/software/bind/advisories/cve-2011-1910

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:05:06	Multiple Updates
2024-11-28 12:25:43	Multiple Updates
2024-08-02 12:16:33	Multiple Updates
2024-08-02 01:04:41	Multiple Updates
2024-02-02 01:16:04	Multiple Updates
2024-02-01 12:04:35	Multiple Updates
2023-09-05 12:15:03	Multiple Updates
2023-09-05 01:04:27	Multiple Updates
2023-09-02 12:15:07	Multiple Updates
2023-09-02 01:04:31	Multiple Updates
2023-08-12 12:18:15	Multiple Updates
2023-08-12 01:04:32	Multiple Updates
2023-08-11 12:15:12	Multiple Updates
2023-08-11 01:04:40	Multiple Updates
2023-08-06 12:14:36	Multiple Updates
2023-08-06 01:04:32	Multiple Updates
2023-08-04 12:14:41	Multiple Updates
2023-08-04 01:04:33	Multiple Updates
2023-07-14 12:14:40	Multiple Updates
2023-07-14 01:04:31	Multiple Updates
2023-03-29 01:16:35	Multiple Updates
2023-03-28 12:04:37	Multiple Updates
2022-10-11 12:13:04	Multiple Updates
2022-10-11 01:04:16	Multiple Updates
2021-05-04 12:15:19	Multiple Updates
2021-04-22 01:16:52	Multiple Updates
2020-05-23 00:28:32	Multiple Updates
2019-10-10 05:19:27	Multiple Updates
2017-04-22 13:25:52	Multiple Updates
2016-06-28 18:39:45	Multiple Updates
2016-04-04 21:25:32	Multiple Updates
2015-03-17 09:25:42	Multiple Updates
2014-10-11 13:26:06	Multiple Updates
2014-06-14 13:30:45	Multiple Updates
2014-02-17 11:02:24	Multiple Updates
2014-01-19 21:27:49	Multiple Updates
2013-05-10 23:00:35	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	6
CPE ID(s)	238
Sources(s)	27
osvdb(s)	1
Openvas Exploit(s)	20
Snort® Rule(s)	2
Nessus® Exploit(s)	23

	Related
7.8	HPSBUX03235 SSR...
7.1	GLSA-201206-01
5	VU#795694
5	USN-1139-1
5	RHSA-2011:0845
5	MDVSA-2011:104
5	DSA-2244
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)