CVE-2011-1910
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service
02 Description
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 24.63% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 97.6% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- Important. Red Hat's rating for its own products, not a CVSS rating.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2011-05-31 20:00Z15 YR AGO
- Last updated
- 2024-08-06 22:46Z2 YR AGO
- Reserved
- 2011-05-09
- Assigning CNA
- certcc
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- Data version
- 5.1
- Document digest
- 61ef0d4caf01070c4955529dd165f136ebc9ebd6c1c4c4fb18443e35b075efa4
05 Affected products
06 References
- www.kb.cert.orgVU#795694http://www.kb.cert.org/vuls/id/795694
- www.mandriva.comMDVSA-2011:104http://www.mandriva.com/security/advisories?name=MDVSA-2011:104
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=708301
- secunia.com44677http://secunia.com/advisories/44677
- www.securityfocus.com48007http://www.securityfocus.com/bid/48007
- marc.infoHPSBUX03235http://marc.info/?l=bugtraq&m=142180687100892&w=2
- secunia.com44929http://secunia.com/advisories/44929
- slackware.comSSA:2011-147-01http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.685026
- hermes.opensuse.orgopenSUSE-SU-2011:0603https://hermes.opensuse.org/messages/8699912
- secunia.com44783http://secunia.com/advisories/44783
- secunia.com44719http://secunia.com/advisories/44719
- www.debian.orgDSA-2244http://www.debian.org/security/2011/dsa-2244
- lists.fedoraproject.orgFEDORA-2011-7621http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html
- osvdb.org72540http://osvdb.org/72540
- secunia.com44741http://secunia.com/advisories/44741
- lists.apple.comAPPLE-SA-2011-10-12-3http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
- security.freebsd.orgFreeBSD-SA-11:02http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc
- www.redhat.comRHSA-2011:0845http://www.redhat.com/support/errata/RHSA-2011-0845.html
- lists.fedoraproject.orgFEDORA-2011-7602http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
- secunia.com44744http://secunia.com/advisories/44744
- www.isc.orghttps://www.isc.org/software/bind/advisories/cve-2011-1910
- support.apple.comhttp://support.apple.com/kb/HT5002
- lists.fedoraproject.orgFEDORA-2011-7617http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html
- secunia.com44762http://secunia.com/advisories/44762
- secunia.com44758http://secunia.com/advisories/44758
- www.securitytracker.com1025572http://www.securitytracker.com/id?1025572
07 Fixed in
Debian 12
- bind9 Fixed in 1:9.8.1.dfsg-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- bind9 Fixed in 1:9.8.1.dfsg-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 14
- bind9 Fixed in 1:9.8.1.dfsg-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.