CVE-2011-4313

Published: Nov 29, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Affected (239)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

219 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.0 rc1
Isc Bind	Version 9.0.0 rc2
Isc Bind	Version 9.0.0 rc3
Isc Bind	Version 9.0.0 rc4
Isc Bind	Version 9.0.0 rc5
Isc Bind	Version 9.0.0 rc6
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0.1 rc1
Isc Bind	Version 9.0.1 rc2
Isc Bind	Version 9.0
Isc Bind	Version 9.1.0 rc1
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.1 rc1
Isc Bind	Version 9.1.1 rc2
Isc Bind	Version 9.1.1 rc3
Isc Bind	Version 9.1.1 rc4
Isc Bind	Version 9.1.1 rc5
Isc Bind	Version 9.1.1 rc6
Isc Bind	Version 9.1.1 rc7
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.2 rc1
Isc Bind	Version 9.1.3
Isc Bind	Version 9.1.3 rc1
Isc Bind	Version 9.1.3 rc2
Isc Bind	Version 9.1.3 rc3
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.0 a1
Isc Bind	Version 9.2.0 a2
Isc Bind	Version 9.2.0 a3
Isc Bind	Version 9.2.0 b1
Isc Bind	Version 9.2.0 b2
Isc Bind	Version 9.2.0 rc10
Isc Bind	Version 9.2.0 rc1
Isc Bind	Version 9.2.0 rc2
Isc Bind	Version 9.2.0 rc3
Isc Bind	Version 9.2.0 rc4
Isc Bind	Version 9.2.0 rc5
Isc Bind	Version 9.2.0 rc6
Isc Bind	Version 9.2.0 rc7
Isc Bind	Version 9.2.0 rc8
Isc Bind	Version 9.2.0 rc9
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.1 rc1
Isc Bind	Version 9.2.1 rc2
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.2 rc1
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.3 rc1
Isc Bind	Version 9.2.3 rc2
Isc Bind	Version 9.2.3 rc3
Isc Bind	Version 9.2.3 rc4
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.4 rc2
Isc Bind	Version 9.2.4 rc3
Isc Bind	Version 9.2.4 rc4
Isc Bind	Version 9.2.4 rc5
Isc Bind	Version 9.2.4 rc6
Isc Bind	Version 9.2.4 rc7
Isc Bind	Version 9.2.4 rc8
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.5 b2
Isc Bind	Version 9.2.5 rc1
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.6 rc1
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2.7 rc1
Isc Bind	Version 9.2.7 rc2
Isc Bind	Version 9.2.7 rc3
Isc Bind	Version 9.2.8
Isc Bind	Version 9.2.9
Isc Bind	Version 9.2.9 rc1
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.0 b2
Isc Bind	Version 9.3.0 b3
Isc Bind	Version 9.3.0 b4
Isc Bind	Version 9.3.0 rc1
Isc Bind	Version 9.3.0 rc2
Isc Bind	Version 9.3.0 rc3
Isc Bind	Version 9.3.0 rc4
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.1 b2
Isc Bind	Version 9.3.1 rc1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.2 rc1
Isc Bind	Version 9.3.3
Isc Bind	Version 9.3.3 rc1
Isc Bind	Version 9.3.3 rc2
Isc Bind	Version 9.3.3 rc3
Isc Bind	Version 9.3.4
Isc Bind	Version 9.3.5
Isc Bind	Version 9.3.5 rc1
Isc Bind	Version 9.3.5 rc2
Isc Bind	Version 9.3.6
Isc Bind	Version 9.3.6 rc1
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.0 a1
Isc Bind	Version 9.4.0 a2
Isc Bind	Version 9.4.0 a3
Isc Bind	Version 9.4.0 a4
Isc Bind	Version 9.4.0 a5
Isc Bind	Version 9.4.0 a6
Isc Bind	Version 9.4.0 b1
Isc Bind	Version 9.4.0 b2
Isc Bind	Version 9.4.0 b3
Isc Bind	Version 9.4.0 b4
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.4.0 rc2
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.2 rc1
Isc Bind	Version 9.4.2 rc2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4.3 b1
Isc Bind	Version 9.4.3 b2
Isc Bind	Version 9.4.3 b3
Isc Bind	Version 9.4.3 p2
Isc Bind	Version 9.4.3 rc1
Isc Bind	Version 9.4
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.0 a1
Isc Bind	Version 9.5.0 a2
Isc Bind	Version 9.5.0 a3
Isc Bind	Version 9.5.0 a4
Isc Bind	Version 9.5.0 a5
Isc Bind	Version 9.5.0 a6
Isc Bind	Version 9.5.0 a7
Isc Bind	Version 9.5.0 b1
Isc Bind	Version 9.5.0 b2
Isc Bind	Version 9.5.0 b3
Isc Bind	Version 9.5.0 p1
Isc Bind	Version 9.5.0 p2
Isc Bind	Version 9.5.0 p2_w1
Isc Bind	Version 9.5.0 p2_w2
Isc Bind	Version 9.5.0 rc1
Isc Bind	Version 9.5.1
Isc Bind	Version 9.5.1 b1
Isc Bind	Version 9.5.1 b2
Isc Bind	Version 9.5.1 b3
Isc Bind	Version 9.5.1 rc1
Isc Bind	Version 9.5.1 rc2
Isc Bind	Version 9.5.2
Isc Bind	Version 9.5.2 b1
Isc Bind	Version 9.5.2 p1
Isc Bind	Version 9.5.2 p2
Isc Bind	Version 9.5.2 p3
Isc Bind	Version 9.5.2 p4
Isc Bind	Version 9.5.2 rc1
Isc Bind	Version 9.5.3 b1
Isc Bind	Version 9.5.3 rc1
Isc Bind	Version 9.5
Isc Bind	Version 9.6.0
Isc Bind	Version 9.6.0 a1
Isc Bind	Version 9.6.0 b1
Isc Bind	Version 9.6.0 p1
Isc Bind	Version 9.6.0 rc1
Isc Bind	Version 9.6.0 rc2
Isc Bind	Version 9.6.1
Isc Bind	Version 9.6.1 b1
Isc Bind	Version 9.6.1 p1
Isc Bind	Version 9.6.1 p2
Isc Bind	Version 9.6.1 p3
Isc Bind	Version 9.6.1 rc1
Isc Bind	Version 9.6.2
Isc Bind	Version 9.6.2 b1
Isc Bind	Version 9.6.2 p1
Isc Bind	Version 9.6.2 p2
Isc Bind	Version 9.6.2 p3
Isc Bind	Version 9.6.2 rc1
Isc Bind	Version 9.6.3
Isc Bind	Version 9.6.3 b1
Isc Bind	Version 9.6.3 rc1
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.0 a1
Isc Bind	Version 9.7.0 a2
Isc Bind	Version 9.7.0 a3
Isc Bind	Version 9.7.0 b1
Isc Bind	Version 9.7.0 b2
Isc Bind	Version 9.7.0 b3
Isc Bind	Version 9.7.0 p1
Isc Bind	Version 9.7.0 p2
Isc Bind	Version 9.7.0 rc1
Isc Bind	Version 9.7.0 rc2
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.1 b1
Isc Bind	Version 9.7.1 p1
Isc Bind	Version 9.7.1 p2
Isc Bind	Version 9.7.1 rc1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.2 p1
Isc Bind	Version 9.7.2 p2
Isc Bind	Version 9.7.2 p3
Isc Bind	Version 9.7.2 rc1
Isc Bind	Version 9.7.3
Isc Bind	Version 9.7.3 b1
Isc Bind	Version 9.7.3 p1
Isc Bind	Version 9.7.3 rc1
Isc Bind	Version 9.7.4
Isc Bind	Version 9.7.4 b1
Isc Bind	Version 9.7.4 rc1
Isc Bind	Version 9.8.0
Isc Bind	Version 9.8.0 a1
Isc Bind	Version 9.8.0 b1
Isc Bind	Version 9.8.0 p1
Isc Bind	Version 9.8.0 p2
Isc Bind	Version 9.8.0 p4
Isc Bind	Version 9.8.0 rc1
Isc Bind	Version 9.8.1
Isc Bind	Version 9.8.1 b1
Isc Bind	Version 9.8.1 b2
Isc Bind	Version 9.8.1 b3
Isc Bind	Version 9.8.1 rc1
Isc Bind	Version 9.9.0 a1
Isc Bind	Version 9.9.0 a2
Isc Bind	Version 9.9.0 a3
Isc Bind	Version 9.9.0 b1

Configuration B

20 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.4
Isc Bind	Version 9.4 b1
Isc Bind	Version 9.4 r1
Isc Bind	Version 9.4 r2
Isc Bind	Version 9.4 r3
Isc Bind	Version 9.4 r4-p1
Isc Bind	Version 9.4 r4
Isc Bind	Version 9.4 r5-b1
Isc Bind	Version 9.4 r5-p1
Isc Bind	Version 9.4 r5-rc1
Isc Bind	Version 9.4 r5
Isc Bind	Version 9.6
Isc Bind	Version 9.6 r1
Isc Bind	Version 9.6 r2
Isc Bind	Version 9.6 r3
Isc Bind	Version 9.6 r4
Isc Bind	Version 9.6 r4_p1
Isc Bind	Version 9.6 r5
Isc Bind	Version 9.6 r5_b1
Isc Bind	Version 9.6 r5_p1

References (78)

http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=132310123002302&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=133978480208466&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=141879471518471&w=2

Source: secalert@redhat.com

http://osvdb.org/77159

Source: secalert@redhat.com

http://secunia.com/advisories/46536

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46829

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46887

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46890

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46905

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46906

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46943

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46984

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/47043

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/47075

Source: secalert@redhat.com

http://secunia.com/advisories/48308

Source: secalert@redhat.com

http://security.freebsd.org/advisories/FreeBSD-SA-11:06.bind.asc

Source: secalert@redhat.com

http://support.apple.com/kb/HT5501

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=isg1IV11106

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2347

Source: secalert@redhat.com

http://www.ibm.com/support/docview.wss?uid=isg1IV11248

Source: secalert@redhat.com

http://www.isc.org/software/bind/advisories/cve-2011-4313

Source: secalert@redhat.com

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/606539

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2011:176

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-1458.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-1459.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-1496.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/50690

Source: secalert@redhat.com

http://www.securitytracker.com/id?1026335

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1264-1

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/71332

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14343

Source: secalert@redhat.com

http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of