Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.

The remote host is affected by the vulnerability described in GLSA-201206-01 (BIND: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in BIND. Please review the       CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow remote attackers to cause a Denial of Service       (daemon crash) via a DNS query, to bypass intended access restrictions,       to incorrectly cache a ncache entry and a rrsig for the same type and to       incorrectly mark zone data as insecure.
  Workaround :

    There is no known workaround at this time.

Update to the 9.8.0-P4 security release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running Bind, a popular name server. 

Versions of BIND 9.8 earlier than 9.8.0-P3 are potentially affected by a denial of service vulnerability.  If an attacker sends a specially crafted request to a BIND server that has recursion enabled and Response Policy Zones (RPZ) configured, it may cause the name server process to crash.

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability.  If an attacker sends a specially crafted request to a BIND server that has recursion enabled and Response Policy Zones (RPZ) configured, it may cause the name server process to crash. 

Note that Nessus has only relied on the version itself and has not attempted to determine whether or not the install is actually affected.

ISC reports :

Two defects were discovered in ISC's BIND 9.8 code. These defects only affect BIND 9.8 servers which have recursion enabled and which use a specific feature of the software known as Response Policy Zones (RPZ) and where the RPZ zone contains a specific rule/action pattern.

ID	Name	Product	Family	Severity
59629	GLSA-201206-01 : BIND: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
55562	Fedora 15 : bind-9.8.0-7.P4.fc15 (2011-9146)	Nessus	Fedora Local Security Checks	medium
5981	ISC BIND 9 Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS	Nessus Network Monitor	DNS Servers	medium
55533	ISC BIND Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS	Nessus	DNS	high
55517	FreeBSD : BIND -- Remote DoS with certain RPZ configurations (4ccee784-a721-11e0-89b4-001ec9578670)	Nessus	FreeBSD Local Security Checks	low

Detections

Analytics

CVE-2011-2465

high

Tenable Plugins

high

medium

medium

high

low