Vulnerability in Isc Bind
CVE-2011-0414
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.
EPSS: 0.136 (96.1th percentile) — read the EPSS interpretation.
Affected products
- Isc Bind — versions 9.7.1, 9.7.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_SUSE)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (vendor-advisory, x_refsource_DEBIAN)
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)