Every CVE Search/ Get API key

CVE-2011-4313

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5,...

5.0 MediumFix available

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Exploit likelihood

16.2%Down 10.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
CVE-2011-4313
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
CVE-2011-4313
Updated
2026-11-02
EUVDEUVD-2011-4247 No score

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
EUVD-2011-4247
Updated
2026-11-03
GitHub AdvisoriesGHSA-57gh-wgq6-m27j No score

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5,...

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
GHSA-57gh-wgq6-m27j
Updated
2026-11-02
OSV No score

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
CVE-2011-4313
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4313 No score

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

Record
DEBIAN-CVE-2011-4313
Updated
2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score

bind-9.10.3P4-21.1 on GA media

These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10467-1
Updated
2026-11-02
OSVSUSE-SU-2015:0480-1 No score

Security update for bind

This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.

Security Issue references:

* CVE-2014-0591
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591>
Record
SUSE-SU-2015:0480-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind9
Debian:12
 before 1:9.8.1.dfsg.P1-1
1:9.8.1.dfsg.P1-1
bind9
Debian:13
 before 1:9.8.1.dfsg.P1-1
1:9.8.1.dfsg.P1-1
bind9
Debian:14
 before 1:9.8.1.dfsg.P1-1
1:9.8.1.dfsg.P1-1
bind9
Debian:5.0
 before 1:9.6.ESV.R4+dfsg-0+lenny4, plus listed versions
1:9.5.0.dfsg.P2-5.11:9.5.1.dfsg.P1-11:9.5.1.dfsg.P1-21:9.5.1.dfsg.P1-31:9.5.1.dfsg.P2-1
Show 22 moreShow less
1:9.5.1.dfsg.P2-1+lenny11:9.5.1.dfsg.P3-11:9.5.1.dfsg.P3-1+lenny11:9.6.0.dfsg.P1-01:9.6.0.dfsg.P1-11:9.6.0.dfsg.P1-21:9.6.1.dfsg-11:9.6.1.dfsg-21:9.6.1.dfsg.P1-11:9.6.1.dfsg.P1-21:9.6.1.dfsg.P1-31:9.6.1.dfsg.P2-11:9.6.1.dfsg.P3-11:9.6.1.dfsg.P3-1~bpo50+11:9.6.ESV+dfsg-0+lenny11:9.6.ESV.R1+dfsg-0+lenny11:9.6.ESV.R1+dfsg-0+lenny21:9.6.ESV.R2+dfsg-0+lenny11:9.6.ESV.R3+dfsg-0+lenny11:9.6.ESV.R4+dfsg-0+lenny11:9.6.ESV.R4+dfsg-0+lenny21:9.6.ESV.R4+dfsg-0+lenny3
1:9.6.ESV.R4+dfsg-0+lenny4
bind9
Debian:6.0
 before 1:9.7.3.dfsg-1~squeeze4, plus listed versions
1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+11:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+1
1:9.7.3.dfsg-1~squeeze4
bind
Red Hat:enterprise_linux:5::client
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-debuginfo
Red Hat:enterprise_linux:5::client
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-libs
Red Hat:enterprise_linux:5::client
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-sdb
Red Hat:enterprise_linux:5::client
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-utils
Red Hat:enterprise_linux:5::client
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
Show 59 moreShow less
Affected packages
PackageAffectedFixed
bind
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-chroot
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-libbind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
caching-nameserver
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-chroot
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-debuginfo
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-devel
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-libbind-devel
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-libs
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-sdb
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind-utils
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
caching-nameserver
Red Hat:enterprise_linux:5::server
 before 30:9.3.6-16.P1.el5_7.1
30:9.3.6-16.P1.el5_7.1
bind
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-chroot
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-debuginfo
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-libs
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-utils
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-devel
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind-sdb
Red Hat:enterprise_linux:6::server
 before 32:9.7.3-2.el6_1.P3.3
32:9.7.3-2.el6_1.P3.3
bind97
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-chroot
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-devel
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-libs
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-utils
Red Hat:enterprise_linux:5::client_workstation
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-chroot
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-debuginfo
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-devel
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-libs
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind97-utils
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-6.P2.el5_7.4
32:9.7.0-6.P2.el5_7.4
bind
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-chroot
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-debuginfo
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-devel
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-libs
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-utils
Red Hat:enterprise_linux:4::as
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-chroot
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-devel
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-libs
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-utils
Red Hat:enterprise_linux:4::desktop
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-chroot
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-debuginfo
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-devel
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-libs
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-utils
Red Hat:enterprise_linux:4::es
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-chroot
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-debuginfo
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-devel
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-libs
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind-utils
Red Hat:enterprise_linux:4::ws
 before 20:9.2.4-38.el4
20:9.2.4-38.el4
bind
openSUSE:Tumbleweed
From an advisory covering 37 CVEs
 before 9.10.3P4-21.1
9.10.3P4-21.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4313 is a medium vulnerability (CVSS 5.0) in Isc Bind, published November 16, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.2%, the 96th percentile. Fixed in bind9 1:9.8.1.dfsg.P1-1.

References

Show 100 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open