CVE-2011-4313

Description

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 10.33% Top 10%

Vendor Advisory marc.info Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory marc.info Vendor Advisory fedoraproject.org Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory marc.info Vendor Advisory freebsd.org Vendor Advisory opensuse.org Vendor Advisory fedoraproject.org Vendor Advisory apple.com Vendor Advisory ibm.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory fedoraproject.org Vendor Advisory redhat.com Vendor Advisory ibm.com Vendor Advisory opensuse.org Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory isc.org

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=133978480208466&w=2	vendor advisory
http://www.redhat.com/support/errata/RHSA-2011-1459.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:176	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14343	vdb entry signature
http://marc.info/?l=bugtraq&m=141879471518471&w=2	vendor advisory
http://secunia.com/advisories/47075	third party advisory
http://secunia.com/advisories/48308	third party advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.html	vendor advisory
http://www.debian.org/security/2011/dsa-2347	vendor advisory
http://www.redhat.com/support/errata/RHSA-2011-1496.html	vendor advisory
http://osvdb.org/77159	vdb entry
http://marc.info/?l=bugtraq&m=132310123002302&w=2	vendor advisory
http://security.freebsd.org/advisories/FreeBSD-SA-11:06.bind.asc	vendor advisory
http://www.kb.cert.org/vuls/id/606539	third party advisory us government resource
http://secunia.com/advisories/46943	third party advisory vendor advisory
http://secunia.com/advisories/46829	third party advisory vendor advisory
http://secunia.com/advisories/47043	third party advisory vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.html	vendor advisory
http://secunia.com/advisories/46906	third party advisory vendor advisory
http://secunia.com/advisories/46536	third party advisory vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.html	vendor advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html	vendor advisory
http://secunia.com/advisories/46890	third party advisory vendor advisory
http://support.apple.com/kb/HT5501
http://www.ibm.com/support/docview.wss?uid=isg1IV11248	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71332	vdb entry
http://secunia.com/advisories/46887	third party advisory vendor advisory
http://secunia.com/advisories/46984	third party advisory vendor advisory
http://www.isc.org/software/bind/advisories/cve-2011-4313	patch vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html	vendor advisory
http://www.ubuntu.com/usn/USN-1264-1	vendor advisory
http://secunia.com/advisories/46905	third party advisory vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.html	vendor advisory
http://www.redhat.com/support/errata/RHSA-2011-1458.html	vendor advisory
http://www.securityfocus.com/bid/50690	vdb entry
http://www-01.ibm.com/support/docview.wss?uid=isg1IV11106	vendor advisory
http://www.securitytracker.com/id?1026335	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.html	vendor advisory
http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of

Frequently Asked Questions

What is the severity of CVE-2011-4313?: CVE-2011-4313 has been scored as a medium severity vulnerability.
How to fix CVE-2011-4313?: To fix CVE-2011-4313, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2011-4313 being actively exploited in the wild?: It is possible that CVE-2011-4313 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~10% probability that this vulnerability will be exploited by malicious actors in the next 30 days.