CVE-2011-2465

NameCVE-2011-2465
DescriptionUnspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
bind9 (PTS)bullseye1:9.16.48-1fixed
bullseye (security)1:9.16.50-1~deb11u1fixed
bookworm1:9.18.24-1fixed
bookworm (security)1:9.18.28-1~deb12u1fixed
sid, trixie1:9.20.0-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
bind9sourcelenny(not affected)
bind9sourcesqueeze(not affected)
bind9source(unstable)1:9.8.1.dfsg.P1-1

Notes

[squeeze] - bind9 <not-affected> (Only affects 9.8)
[lenny] - bind9 <not-affected> (Only affects 9.8)

Search for package or bug name: Reporting problems