CVE-2011-1910 Integer overflow in n/a

Medium 5.0 Published 31 May 2011 Updated 6 Aug 2024

Remote attackers can cause a denial of service in ISC BIND DNS servers by sending crafted negative responses with large RRSIG records.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-1910?

CVE-2011-1910 is a medium-severity vulnerability in Isc Bind, published on 31 May 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.

Weakness: CWE-189

Which versions are affected by CVE-2011-1910?

It affects 1 product.

Linux distribution packages (13)

`bind97` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind97-chroot` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind97-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind97-devel` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind97-libs` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind97-utils` Red Hat:enterprise_linux:5::server	All versions	`32:9.7.0-6.P2.el5_6.2`
`bind` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-chroot` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-devel` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-libs` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-sdb` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`
`bind-utils` Red Hat:enterprise_linux:6::server	All versions	`32:9.7.3-2.el6_1.P1.1`

Products include Isc Bind.

How do I fix CVE-2011-1910?

Upgrade to a fixed version.

Is CVE-2011-1910 being exploited?

There is no known exploitation of CVE-2011-1910 in the wild and no public exploit code.

All Isc Bind vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-1910, DSA-2244-1, GHSA-3wf6-qrm5-g4cj, RHSA-2011:0845.