National Cyber Awareness System

Vulnerability Summary for CVE-2011-2464

Overview

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#142646

Name: VU#142646

Hyperlink:http://www.kb.cert.org/vuls/id/142646

External Source: UBUNTU

Name: USN-1163-1

Hyperlink:https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-July/001365.html

External Source: XF

Name: iscbind-update-dos(68375)

Hyperlink:http://xforce.iss.net/xforce/xfdb/68375

External Source: SLACKWARE

Name: SSA:2011-189-01

Hyperlink:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.377171

External Source: SECTRACK

Name: 1025742

Hyperlink:http://www.securitytracker.com/id?1025742

External Source: BID

Name: 48566

Hyperlink:http://www.securityfocus.com/bid/48566

External Source: BUGTRAQ

Name: 20110705 Security Advisory: CVE-2011-2464 - ISC BIND 9 Remote packet Denial of Service against Authoritative and Recursive Servers

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/518749/100/0/threaded

External Source: REDHAT

Name: RHSA-2011:0926

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0926.html

External Source: MANDRIVA

Name: MDVSA-2011:115

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:115

External Source: CONFIRM

Name: http://www.isc.org/software/bind/advisories/cve-2011-2464

Hyperlink:http://www.isc.org/software/bind/advisories/cve-2011-2464

External Source: DEBIAN

Name: DSA-2272

Hyperlink:http://www.debian.org/security/2011/dsa-2272

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5002

Hyperlink:http://support.apple.com/kb/HT5002

External Source: SECUNIA

Name: 45412

Hyperlink:http://secunia.com/advisories/45412

External Source: SECUNIA

Name: 45410

Hyperlink:http://secunia.com/advisories/45410

External Source: SECUNIA

Name: 45223

Hyperlink:http://secunia.com/advisories/45223

External Source: SECUNIA

Name: 45185

Type: Advisory

Hyperlink:http://secunia.com/advisories/45185

External Source: SECUNIA

Name: 45177

Hyperlink:http://secunia.com/advisories/45177

External Source: SECUNIA

Name: 45143

Hyperlink:http://secunia.com/advisories/45143

External Source: SECUNIA

Name: 45089

Hyperlink:http://secunia.com/advisories/45089

External Source: SECUNIA

Name: 45082

Type: Advisory

Hyperlink:http://secunia.com/advisories/45082

External Source: OVAL

Name: oval:org.mitre.oval:def:13997

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13997

External Source: OSVDB

Name: 73605

Hyperlink:http://osvdb.org/73605

External Source: HP

Name: SSRT100658

Hyperlink:http://marc.info/?l=bugtraq&m=131983337229394&w=2

External Source: HP

Name: HPSBUX02719

Hyperlink:http://marc.info/?l=bugtraq&m=131983337229394&w=2

External Source: SUSE

Name: openSUSE-SU-2011:0788

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00006.html

External Source: SUSE

Name: SUSE-SU-2011:0759

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00004.html

External Source: SUSE

Name: SUSE-SA:2011:029

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html

External Source: FEDORA

Name: FEDORA-2011-9127

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062846.html

External Source: FEDORA

Name: FEDORA-2011-9146

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-3

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

External Source: CONFIRM

Name: http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial

Hyperlink:http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial