CVE-2011-0414
NoneCVSS
—
EPSS
13.7%
Published
Feb 23, 2011
CISA due date
—
The record
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | bind9 | 0 | 1:9.7.3.dfsg-1 |
| Debian:12 | bind9 | 0 | 1:9.7.3.dfsg-1 |
| Debian:13 | bind9 | 0 | 1:9.7.3.dfsg-1 |
| Debian:6.0 | bind9 | 0 | 1:9.7.3.dfsg-1~squeeze1 |
| openSUSE:Tumbleweed | bind | 0 | 9.10.3P4-21.1 |
Related vulnerabilities
- CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND… Also affects bind9
- CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses… Also affects bind9
- CVE-2024-12705 Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by… Also affects bind9
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind9
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind9
- CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver… Also affects bind9
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind9