Description
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 13 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 12 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze2 | DSA-2244-1 |
| Debian 5.0 | bind9 | 1:9.6.ESV.R4+dfsg-0+lenny2 | DSA-2244-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | bind +5 | 32:9.7.3-2.el6_1.P1.1 | RHSA-2011:0845 |
| RHEL 5 | bind97 +4 | 32:9.7.0-6.P2.el5_6.2 | RHSA-2011:0845 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 | openSUSE-SU-2024:10467-1 |
Advisories 3
- RHSA-2011:0845 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2244-1 bind9 - wrong boundary condition Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10467-1 bind-9.10.3P4-21.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- VU#795694 third-party-advisory
- MDVSA-2011:104 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=708301
- 44677 third-party-advisory
- 48007 vdb-entry
- HPSBUX03235 vendor-advisory
- 44929 third-party-advisory
- SSA:2011-147-01 vendor-advisory
- openSUSE-SU-2011:0603 vendor-advisory
- 44783 third-party-advisory
- 44719 third-party-advisory
- DSA-2244 vendor-advisory
- FEDORA-2011-7621 vendor-advisory
- 72540 vdb-entry
- 44741 third-party-advisory
- APPLE-SA-2011-10-12-3 vendor-advisory
- FreeBSD-SA-11:02 vendor-advisory
- RHSA-2011:0845 vendor-advisory
- FEDORA-2011-7602 vendor-advisory
- 44744 third-party-advisory
- https://www.isc.org/software/bind/advisories/cve-2011-1910
- http://support.apple.com/kb/HT5002
- FEDORA-2011-7617 vendor-advisory
- 44762 third-party-advisory
- 44758 third-party-advisory
- 1025572 vdb-entry