CVE-2011-1907
published 2011-05-09CVE-2011-1907: ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion…
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
5.37%
91.8th percentile
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | bind9 | < bind9 1:9.8.1.dfsg.P1-1 (bookworm) | bind9 1:9.8.1.dfsg.P1-1 (bookworm) |
| isc | bind | — | — |
| isc | bind9 | >= 0 < 1:9.8.1.dfsg.P1-1 | 1:9.8.1.dfsg.P1-1 |
| isc | bind9 | >= 0 < 1:9.8.1.dfsg.P1-1 | 1:9.8.1.dfsg.P1-1 |
| isc | bind9 | >= 0 < 1:9.8.1.dfsg.P1-1 | 1:9.8.1.dfsg.P1-1 |
| isc | bind9 | >= 0 < 1:9.8.1.dfsg.P1-1 | 1:9.8.1.dfsg.P1-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)
vendor_redhat·2011-05-05·CVSS 5.0
CVE-2011-1907 [MEDIUM] bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)
bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
Statement: Not vulnerable. This issue did not affect the versions of bind as shipped with Red Hat Enterprise Linux 4, 5, or 6 as they did not include support for Response Policy Zones (RPZ).
Package: bind (Red Hat Enterprise Linux 4) - Not affected
Package: bind (Red Hat Enterprise Linux 5) - Not affected
Package: bind97 (Red Hat Enterprise Linux 5) - Not affected
Package: bind (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2011-1907: bind9 - ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replaceme...
vendor_debian·2011·CVSS 5.0
CVE-2011-1907 [MEDIUM] CVE-2011-1907: bind9 - ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replaceme...
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
Scope: local
bookworm: resolved (fixed in 1:9.8.1.dfsg.P1-1)
bullseye: resolved (fixed in 1:9.8.1.dfsg.P1-1)
forky: resolved (fixed in 1:9.8.1.dfsg.P1-1)
sid: resolved (fixed in 1:9.8.1.dfsg.P1-1)
trixie: resolved (fixed in 1:9.8.1.dfsg.P1-1)
GHSA
GHSA-2j8v-wf82-m8qv: ISC BIND 9
ghsa_unreviewed·2022-05-14
CVE-2011-1907 [MEDIUM] GHSA-2j8v-wf82-m8qv: ISC BIND 9
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
OSV
CVE-2011-1907: ISC BIND 9
osv·2011-05-09·CVSS 5.0
CVE-2011-1907 [MEDIUM] CVE-2011-1907: ISC BIND 9
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/44416http://www.securityfocus.com/archive/1/517900/100/0/threadedhttp://www.securityfocus.com/bid/47734http://www.securitytracker.com/id?1025503http://www.vupen.com/english/advisories/2011/1183https://exchange.xforce.ibmcloud.com/vulnerabilities/67297https://www.isc.org/CVE-2011-1907http://secunia.com/advisories/44416http://www.securityfocus.com/archive/1/517900/100/0/threadedhttp://www.securityfocus.com/bid/47734http://www.securitytracker.com/id?1025503http://www.vupen.com/english/advisories/2011/1183https://exchange.xforce.ibmcloud.com/vulnerabilities/67297https://www.isc.org/CVE-2011-1907
2011-05-09
Published