Unscored severity · published Nov 29, 2011
CVE-2011-4313
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows…
–
CVSS
16.2%
EPSS
No
On KEV
Description
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bind · Isc
9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4313
blogs.oracle.com
http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of
lists.apple.com
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html
More from Bind
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2026-3593
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
9.8
CVE-2021-25216
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions…
8.6
CVE-2020-8616
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially…
8.6
CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature…