Description
Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
| Debian 13 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
| Debian 12 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
References
- 45185 third-party-advisory
- 20110705 Security Advisory: CVE-2011-2465 ISC BIND 9 Remote Crash with Certain RPZ Configurations mailing-list
- 1025743 vdb-entry
- http://www.isc.org/software/bind/advisories/cve-2011-2465
- 73604 vdb-entry
- VU#137968 third-party-advisory
- 48565 vdb-entry
- FEDORA-2011-9146 vendor-advisory
- SUSE-SA:2011:029 vendor-advisory
- iscbind-rpz-dos(68374) vdb-entry