CVE-2011-2465 Denial of service in n/a

Low 2.6 Published 8 Jul 2011 Updated 6 Aug 2024

Remote attackers can crash the ISC BIND DNS server via a specific query when recursion and Response Policy Zones are enabled.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-2465?

CVE-2011-2465 is a low-severity denial of service vulnerability in Isc Bind, published on 8 Jul 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.

Which versions are affected by CVE-2011-2465?

It affects 1 product.

Products include Isc Bind.

How do I fix CVE-2011-2465?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-2465 being exploited?

There is no known exploitation of CVE-2011-2465 in the wild and no public exploit code.

All Isc Bind vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-2465, GHSA-mq9v-93wj-m5jw.