Lucene search

K
f5F5F5:K14204
HistorySep 10, 2013 - 12:00 a.m.

K14204 : BIND vulnerability CVE-2011-4313

2013-09-1000:00:00
my.f5.com
16

6.3 Medium

AI Score

Confidence

Low

Security Advisory Description

ISC reports that query.c in BIND may allow remote attackers to cause a denial-of-service (assertion failure and named exit). The vulnerability uses unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver. The affected versions of BIND are as follows:

  • 9.0.x through 9.6.x
  • 9.4-ESV through 9.4-ESV-R5
  • 9.6-ESV through 9.6-ESV-R5
  • 9.7.0 through 9.7.4
  • 9.8.0 through 9.8.1
  • 9.9.0a1 through 9.9.0b1

Impact

This issue may cause recursive name servers to crash.

This issue may affect BIG-IP systems in which BIND is configured as a recursive name server.