Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0021 for details.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Fix CVE-2017-3136 (ISC change 4575)

  - Fix CVE-2017-3137 (ISC change 4578)

  - Fix and test caching CNAME before DNAME (ISC change     4558)

  - Fix CVE-2016-9147 (ISC change 4510)

  - Fix regression introduced by CVE-2016-8864 (ISC change     4530)

  - Restore SELinux contexts before named restart

  - Use /lib or /lib64 only if directory in chroot already     exists

  - Tighten NSS library pattern, escape chroot mount path

  - Fix (CVE-2016-8864)

  - Do not change lib permissions in chroot (#1321239)

  - Support WKS records in chroot (#1297562)

  - Do not include patch backup in docs (fixes #1325081     patch)

  - Backported relevant parts of [RT #39567] (#1259923)

  - Increase ISC_SOCKET_MAXEVENTS to 2048 (#1326283)

  - Fix multiple realms in nsupdate script like upstream     (#1313286)

  - Fix multiple realm in nsupdate script (#1313286)

  - Use resolver-query-timeout high enough to recover all     forwarders (#1325081)

  - Fix (CVE-2016-2848)

  - Fix infinite loop in start_lookup (#1306504)

  - Fix (CVE-2016-2776)

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a Denial of Service (DoS) (named daemon crash) by way of a crafted UPDATE request.

A remote Denial of Service vulnerability has been fixed in bind.
Specially crafted packets could cause bind servers (recursive as well as authoritative) to exit. CVE-2011-2464 has been assigned to this issue.

From Red Hat Security Advisory 2011:0926 :

Updated bind and bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

A flaw was discovered in the way BIND handled certain DNS requests. A remote attacker could use this flaw to send a specially crafted DNS request packet to BIND, causing it to exit unexpectedly due to a failed assertion. (CVE-2011-2464)

Users of bind97 on Red Hat Enterprise Linux 5, and bind on Red Hat Enterprise Linux 6, are advised to upgrade to these updated packages, which resolve this issue. After installing the update, the BIND daemon (named) will be restarted automatically.

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

A flaw was discovered in the way BIND handled certain DNS requests. A remote attacker could use this flaw to send a specially crafted DNS request packet to BIND, causing it to exit unexpectedly due to a failed assertion. (CVE-2011-2464)

After installing the update, the BIND daemon (named) will be restarted automatically.

The remote host is affected by the vulnerability described in GLSA-201206-01 (BIND: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in BIND. Please review the       CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow remote attackers to cause a Denial of Service       (daemon crash) via a DNS query, to bypass intended access restrictions,       to incorrectly cache a ncache entry and a rrsig for the same type and to       incorrectly mark zone data as insecure.
  Workaround :

    There is no known workaround at this time.

s700_800 11.23 BIND 9.2.0 Revision 5.0 : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running BIND. This vulnerability could be     exploited remotely to create a Denial of Service (DoS).
    (HPSBUX02729 SSRT100687)

  - A potential security vulnerability has been identified     with HP-UX running BIND. This vulnerability could be     exploited remotely to create a Denial of Service (DoS).
    (HPSBUX02719 SSRT100658)

A remote denial of service vulnerability has been fixed in bind.
Specially crafted packets could cause bind servers (recursive as well as authoritative) to exit.

Versions of Mac OS X 10.7 earlier than 10.7.2 are potentially affected by a security issue.  Mac OS X 10.7.2 contains a security fix for the following products : 

  - Apache

  - Application Firewall

  - ATS

 - BIND

  - Certificate Trust Policy

  - CFNetwork

  - CoreMedia

  - CoreProcesses

  - CoreStorage

  - File Systems

  - iChat Server

  - Kernel

  - libsecurity

  - Open Directory

  - PHP

  - python

  - QuickTime

  - SMB File Server

  - X11

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-006 applied.  This update contains numerous security-related fixes for the following components :

  - Apache
  - Application Firewall
  - ATS
  - BIND
  - Certificate Trust Policy
  - CFNetwork
  - CoreFoundation
  - CoreMedia
  - File Systems
  - IOGraphics
  - iChat Server
  - Mailman
  - MediaKit
  - PHP
  - postfix
  - python
  - QuickTime
  - Tomcat
  - User Documentation
  - Web Server
  - X11

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.2. This version contains numerous security-related fixes for the following components :

  - Apache
  - Application Firewall
  - ATS
  - BIND
  - Certificate Trust Policy
  - CFNetwork
  - CoreMedia
  - CoreProcesses
  - CoreStorage
  - File Systems
  - iChat Server
  - Kernel
  - libsecurity
  - Open Directory
  - PHP
  - python
  - QuickTime
  - SMB File Server
  - X11

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues.

New bind packages are available for Slackware 13.37, and -current to fix a security issue.

This update fixes CVE-2011-2464.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability was discovered and corrected in bind :

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request (CVE-2011-2464).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been upgraded to bind 9.7.3-P3 which is not vulnerable to this issue.

Update to the 9.8.0-P4 security release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A remote Denial of Service vulnerability has been fixed in bind.
Specially crafted packets could cause bind servers (recursive as well as authoritative) to exit.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0926 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain     Name System (DNS) protocols. BIND includes a DNS server (named); a resolver     library (routines for applications to use when interfacing with DNS); and     tools for verifying that the DNS server is operating correctly.

    A flaw was discovered in the way BIND handled certain DNS requests. A     remote attacker could use this flaw to send a specially-crafted DNS request     packet to BIND, causing it to exit unexpectedly due to a failed assertion.
    (CVE-2011-2464)

    Users of bind97 on Red Hat Enterprise Linux 5, and bind on Red Hat     Enterprise Linux 6, are advised to upgrade to these updated packages, which     resolve this issue. After installing the update, the BIND daemon (named)     will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated bind and bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

A flaw was discovered in the way BIND handled certain DNS requests. A remote attacker could use this flaw to send a specially crafted DNS request packet to BIND, causing it to exit unexpectedly due to a failed assertion. (CVE-2011-2464)

Users of bind97 on Red Hat Enterprise Linux 5, and bind on Red Hat Enterprise Linux 6, are advised to upgrade to these updated packages, which resolve this issue. After installing the update, the BIND daemon (named) will be restarted automatically.

The remote host is running Bind, a popular name server. 

Versions of BIND 9.6 earlier than 9.6-ESV-R4-P3, 9.7 earlier than 9.7.3-P3, and 9.8 earlier than 9.8.0-P4 are potentially affected by a denial of service vulnerability.  If an attacker sends a specially crafted request to a BIND server it may cause the name server process to crash.

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability.  If an attacker sends a specially crafted request to a BIND server it may cause the name server process to crash. 

Note that Nessus has only relied on the version itself and has not attempted to determine whether or not the install is actually vulnerable.

It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ISC reports :

A defect in the affected BIND 9 versions allows an attacker to remotely cause the 'named' process to exit using a specially crafted packet.

This defect affects both recursive and authoritative servers.

It was discovered that BIND, a DNS server, does not correctly process certain UPDATE requests, resulting in a server crash and a denial of service. This vulnerability affects BIND installations even if they do not actually use dynamic DNS updates.

ID	Name	Product	Family	Severity
137170	OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)	Nessus	OracleVM Local Security Checks	medium
99569	OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0066)	Nessus	OracleVM Local Security Checks	high
78130	F5 Networks BIG-IP : BIND vulnerability (SOL12986)	Nessus	F5 Networks Local Security Checks	medium
75794	openSUSE Security Update : bind (openSUSE-SU-2011:0788-1)	Nessus	SuSE Local Security Checks	medium
75440	openSUSE Security Update : bind (openSUSE-SU-2011:0788-1)	Nessus	SuSE Local Security Checks	medium
68303	Oracle Linux 5 / 6 : bind (ELSA-2011-0926)	Nessus	Oracle Linux Local Security Checks	medium
61080	Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
59629	GLSA-201206-01 : BIND: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
56840	HP-UX PHNE_42727 : s700_800 11.23 BIND 9.2.0 Revision 5.0	Nessus	HP-UX Local Security Checks	medium
57161	SuSE 10 Security Update : bind (ZYPP Patch Number 7614)	Nessus	SuSE Local Security Checks	medium
6039	Mac OS X 10.7 < 10.7.2 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
56481	Mac OS X Multiple Vulnerabilities (Security Update 2011-006)	Nessus	MacOS X Local Security Checks	critical
56480	Mac OS X 10.7.x < 10.7.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
55834	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 8.1 / 9.0 / 9.1 / current : bind (SSA:2011-224-01)	Nessus	Slackware Local Security Checks	medium
55704	Slackware 13.37 / current : bind (SSA:2011-189-01)	Nessus	Slackware Local Security Checks	medium
55657	Fedora 14 : bind-9.7.4-0.3.b1.fc14 (2011-9127)	Nessus	Fedora Local Security Checks	medium
55634	Mandriva Linux Security Advisory : bind (MDVSA-2011:115)	Nessus	Mandriva Local Security Checks	medium
55562	Fedora 15 : bind-9.8.0-7.P4.fc15 (2011-9146)	Nessus	Fedora Local Security Checks	medium
55547	SuSE 11.1 Security Update : bind (SAT Patch Number 4846)	Nessus	SuSE Local Security Checks	medium
55539	RHEL 5 / 6 : bind (RHSA-2011:0926)	Nessus	Red Hat Local Security Checks	high
55536	CentOS 5 : bind97 (CESA-2011:0926)	Nessus	CentOS Local Security Checks	medium
5982	ISC BIND 9 Unspecified Packet Processing Remote DoS	Nessus Network Monitor	DNS Servers	medium
55534	ISC BIND 9 Unspecified Packet Processing Remote DoS	Nessus	DNS	high
55522	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : bind9 vulnerability (USN-1163-1)	Nessus	Ubuntu Local Security Checks	medium
55518	FreeBSD : BIND -- Remote DoS against authoritative and recursive servers (fd64188d-a71d-11e0-89b4-001ec9578670)	Nessus	FreeBSD Local Security Checks	medium
55516	Debian DSA-2272-1 : bind9 - denial of service	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2011-2464

high

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

high

medium

medium

critical

critical

critical

medium

medium

medium

medium

medium

medium

high

medium

medium

high

medium

medium

medium