Description
Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 13 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 12 | bind9 | 1:9.8.1.dfsg-1 | — |
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze3 | DSA-2272-1 |
| Debian 5.0 | bind9 | 1:9.6.ESV.R4+dfsg-0+lenny3 | DSA-2272-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | bind +5 | 32:9.7.3-2.el6_1.P3.2 | RHSA-2011:0926 |
| RHEL 5 | bind97 +4 | 32:9.7.0-6.P2.el5_6.3 | RHSA-2011:0926 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 | openSUSE-SU-2024:10467-1 |
Advisories 3
- RHSA-2011:0926 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2272-1 bind9 - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10467-1 bind-9.10.3P4-21.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 45185 third-party-advisory
- http://www.isc.org/software/bind/advisories/cve-2011-2464
- 73605 vdb-entry
- 45410 third-party-advisory
- VU#142646 third-party-advisory
- RHSA-2011:0926 vendor-advisory
- 45143 third-party-advisory
- DSA-2272 vendor-advisory
- APPLE-SA-2011-10-12-3 vendor-advisory
- 20110705 Security Advisory: CVE-2011-2464 - ISC BIND 9 Remote packet Denial of Service against Authoritative and Recursive Servers mailing-list
- 45177 third-party-advisory
- USN-1163-1 vendor-advisory
- 1025742 vdb-entry
- 45089 third-party-advisory
- SSA:2011-189-01 vendor-advisory
- 45412 third-party-advisory
- 45223 third-party-advisory
- iscbind-update-dos(68375) vdb-entry
- oval:org.mitre.oval:def:13997 vdb-entry signature
- openSUSE-SU-2011:0788 vendor-advisory
- http://support.apple.com/kb/HT5002
- 45082 third-party-advisory
- MDVSA-2011:115 vendor-advisory
- http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial
- 48566 vdb-entry
- SSRT100658 vendor-advisory
- FEDORA-2011-9146 vendor-advisory
- SUSE-SU-2011:0759 vendor-advisory
- FEDORA-2011-9127 vendor-advisory
- SUSE-SA:2011:029 vendor-advisory