Description
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
| Debian 13 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
| Debian 12 | bind9 | 1:9.8.1.dfsg.P1-1 | — |
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze4 | DSA-2347-1 |
| Debian 5.0 | bind9 | 1:9.6.ESV.R4+dfsg-0+lenny4 | DSA-2347-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | bind +5 | 32:9.7.3-2.el6_1.P3.3 | RHSA-2011:1458 |
| RHEL 5 | bind +7 | 30:9.3.6-16.P1.el5_7.1 | RHSA-2011:1458 |
| RHEL 5 | bind97 +4 | 32:9.7.0-6.P2.el5_7.4 | RHSA-2011:1459 |
| RHEL 4 | bind +4 | 20:9.2.4-38.el4 | RHSA-2011:1496 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 | openSUSE-SU-2024:10467-1 |
Advisories 5
- RHSA-2011:1458 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1496 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1459 Red Hat Security Advisory: bind97 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2347-1 bind9 - improper assert Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10467-1 bind-9.10.3P4-21.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- HPSBOV02774 vendor-advisory
- RHSA-2011:1459 vendor-advisory
- MDVSA-2011:176 vendor-advisory
- oval:org.mitre.oval:def:14343 vdb-entry signature
- HPSBOV03226 vendor-advisory
- 47075 third-party-advisory
- 48308 third-party-advisory
- FEDORA-2011-16057 vendor-advisory
- DSA-2347 vendor-advisory
- RHSA-2011:1496 vendor-advisory
- 77159 vdb-entry
- HPSBUX02729 vendor-advisory
- FreeBSD-SA-11:06 vendor-advisory
- VU#606539 third-party-advisory
- 46943 third-party-advisory
- 46829 third-party-advisory
- 47043 third-party-advisory
- openSUSE-SU-2011:1272 vendor-advisory
- 46906 third-party-advisory
- 46536 third-party-advisory
- FEDORA-2011-16036 vendor-advisory
- APPLE-SA-2012-09-19-2 vendor-advisory
- 46890 third-party-advisory
- http://support.apple.com/kb/HT5501
- IV11248 vendor-advisory
- isc-bind-recursive-dos(71332) vdb-entry
- 46887 third-party-advisory
- 46984 third-party-advisory
- http://www.isc.org/software/bind/advisories/cve-2011-4313
- SUSE-SU-2011:1268 vendor-advisory
- USN-1264-1 vendor-advisory
- 46905 third-party-advisory
- FEDORA-2011-16002 vendor-advisory
- RHSA-2011:1458 vendor-advisory
- 50690 vdb-entry
- IV11106 vendor-advisory
- 1026335 vdb-entry
- SUSE-SU-2011:1270 vendor-advisory
- http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of