CVE-2011-1907
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled,...
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
Exploit likelihood
What each source reports
NVD Score used
5.0
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
CVE-2011-1907- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
CVE-2011-1907- Updated
- 2026-11-02
EUVDEUVD-2011-1905 No score
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
EUVD-2011-1905- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j8v-wf82-m8qv No score
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled,...
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
GHSA-2j8v-wf82-m8qv- Updated
- 2026-11-02
OSV No score
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
CVE-2011-1907- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1907 No score
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
- Record
DEBIAN-CVE-2011-1907- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1907 is a medium vulnerability (CVSS 5.0) in Isc Bind, published May 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.37%, the 92nd percentile. Fixed in bind9 1:9.8.1.dfsg.P1-1.
References
securitytracker.com/id?1025503
vupen.com/english/advisories/2011/1183
secunia.com/advisories/44416
securityfocus.com/bid/47734
isc.org/CVE-2011-1907
securityfocus.com/archive/1/517900/100/0/threaded
Show 41 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/67297
nvd.nist.gov/vuln/detail/CVE-2011-1907
github.com/advisories/GHSA-2j8v-wf82-m8qv
security-tracker.debian.org/tracker/CVE-2011-1907
suse.com/security/cve/CVE-2009-0696
suse.com/security/cve/CVE-2009-4022
suse.com/security/cve/CVE-2010-3613
suse.com/security/cve/CVE-2010-3614
suse.com/security/cve/CVE-2010-3615
suse.com/security/cve/CVE-2011-0414
suse.com/security/cve/CVE-2011-1907
suse.com/security/cve/CVE-2011-1910
suse.com/security/cve/CVE-2011-2464
suse.com/security/cve/CVE-2011-4313
suse.com/security/cve/CVE-2012-1667
suse.com/security/cve/CVE-2012-3817
suse.com/security/cve/CVE-2012-3868
suse.com/security/cve/CVE-2012-4244
suse.com/security/cve/CVE-2012-5166
suse.com/security/cve/CVE-2012-5688
suse.com/security/cve/CVE-2012-5689
suse.com/security/cve/CVE-2013-2266
suse.com/security/cve/CVE-2013-4854
suse.com/security/cve/CVE-2014-0591
suse.com/security/cve/CVE-2014-3214
suse.com/security/cve/CVE-2014-3859
suse.com/security/cve/CVE-2014-8500
suse.com/security/cve/CVE-2014-8680
suse.com/security/cve/CVE-2015-1349
suse.com/security/cve/CVE-2015-4620
suse.com/security/cve/CVE-2015-5477
suse.com/security/cve/CVE-2015-5722
suse.com/security/cve/CVE-2015-5986
suse.com/security/cve/CVE-2015-8000
suse.com/security/cve/CVE-2015-8704
suse.com/security/cve/CVE-2015-8705
suse.com/security/cve/CVE-2016-1285
suse.com/security/cve/CVE-2016-1286
suse.com/security/cve/CVE-2016-2088
suse.com/security/cve/CVE-2016-2776
suse.com/security/cve/CVE-2016-8864