CVE-2011-4313
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 16%
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Affected products
n/a · n/aReferences
http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_ofhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.htmlhttp://marc.info/?l=bugtraq&m=132310123002302&w=2http://marc.info/?l=bugtraq&m=133978480208466&w=2http://marc.info/?l=bugtraq&m=141879471518471&w=2http://osvdb.org/77159