#VU33963 Input validation error in ISC BIND - CVE-2011-1910 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33963

#VU33963 Input validation error in ISC BIND - CVE-2011-1910

Published: May 31, 2011 / Updated: August 4, 2020


Vulnerability identifier: #VU33963
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2011-1910
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
ISC BIND
Software vendor:
ISC

Description

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.


Remediation

Install update from vendor's website.

External links