CVE-2011-4313: isc bind
Vulnerability summary
CVE-2011-4313 is a medium (CVSS 5.0) vulnerability in isc bind. EPSS estimates a 16.17% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1 · Duplicates 1 · Related 1Timeline
- 29-11-2011PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
16.17%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 16.17% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat15 products
- bind< 30:9.3.6-16.P1.el5_7.1 | < 32:9.7.3-2.el6_1.P3.3 | < 20:9.2.4-38.el4
- bind-chroot< 30:9.3.6-16.P1.el5_7.1 | < 32:9.7.3-2.el6_1.P3.3 | < 20:9.2.4-38.el4
- bind-debuginfo< 30:9.3.6-16.P1.el5_7.1 | < 32:9.7.3-2.el6_1.P3.3 | < 20:9.2.4-38.el4
- bind-devel< 30:9.3.6-16.P1.el5_7.1 | < 32:9.7.3-2.el6_1.P3.3 | < 20:9.2.4-38.el4
- bind-libbind-devel< 30:9.3.6-16.P1.el5_7.1
Debian1 product
- bind9< 1:9.6.ESV.R4+dfsg-0+lenny4 | < 1:9.7.3.dfsg-1~squeeze4 | < 1:9.8.1.dfsg.P1-1
Isc1 product
- bind9.0 | 9.0.0:rc1 | 9.0.0:rc2 | 9.0.0:rc3 | 9.0.0:rc4 | 9.0.0:rc5 | 9.0.0:rc6 | 9.0.1 | 9.0.1:rc1 | 9.0.1:rc2 | 9.1 | 9.1.0:rc1 | 9.1.1 | 9.1.1:rc1 | 9.1.1:rc2 | 9.1.1:rc3 | 9.1.1:rc4 | 9.1.1:rc5 | 9.1.1:rc6 | 9.1.1:rc7 | 9.1.2 | 9.1.2:rc1 | 9.1.3 | 9.1.3:rc1 | 9.1.3:rc2 | 9.1.3:rc3 | 9.2.0 | 9.2.0:a1 | 9.2.0:a2 | 9.2.0:a3 | 9.2.0:b1 | 9.2.0:b2 | 9.2.0:rc1 | 9.2.0:rc10 | 9.2.0:rc2 | 9.2.0:rc3 | 9.2.0:rc4 | 9.2.0:rc5 | 9.2.0:rc6 | 9.2.0:rc7 | 9.2.0:rc8 | 9.2.0:rc9 | 9.2.1 | 9.2.1:rc1 | 9.2.1:rc2 | 9.2.2 | 9.2.2:p2 | 9.2.2:p3 | 9.2.2:rc1 | 9.2.3 | 9.2.3:rc1 | 9.2.3:rc2 | 9.2.3:rc3 | 9.2.3:rc4 | 9.2.4 | 9.2.4:rc2 | 9.2.4:rc3 | 9.2.4:rc4 | 9.2.4:rc5 | 9.2.4:rc6 | 9.2.4:rc7 | 9.2.4:rc8 | 9.2.5 | 9.2.5:b2 | 9.2.5:rc1 | 9.2.6 | 9.2.6:rc1 | 9.2.7 | 9.2.7:rc1 | 9.2.7:rc2 | 9.2.7:rc3 | 9.2.8 | 9.2.9 | 9.2.9:rc1 | 9.3 | 9.3.0 | 9.3.0:b2 | 9.3.0:b3 | 9.3.0:b4 | 9.3.0:rc1 | 9.3.0:rc2 | 9.3.0:rc3 | 9.3.0:rc4 | 9.3.1 | 9.3.1:b2 | 9.3.1:rc1 | 9.3.2 | 9.3.2:rc1 | 9.3.3 | 9.3.3:rc1 | 9.3.3:rc2 | 9.3.3:rc3 | 9.3.4 | 9.3.5 | 9.3.5:rc1 | 9.3.5:rc2 | 9.3.6 | 9.3.6:rc1 | 9.4 | 9.4.0 | 9.4.0:a1 | 9.4.0:a2 | 9.4.0:a3 | 9.4.0:a4 | 9.4.0:a5 | 9.4.0:a6 | 9.4.0:b1 | 9.4.0:b2 | 9.4.0:b3 | 9.4.0:b4 | 9.4.0:rc1 | 9.4.0:rc2 | 9.4.1 | 9.4.2 | 9.4.2:rc1 | 9.4.2:rc2 | 9.4.3 | 9.4.3:b1 | 9.4.3:b2 | 9.4.3:b3 | 9.4.3:p2 | 9.4.3:rc1 | 9.5 | 9.5.0 | 9.5.0:a1 | 9.5.0:a2 | 9.5.0:a3 | 9.5.0:a4 | 9.5.0:a5 | 9.5.0:a6 | 9.5.0:a7 | 9.5.0:b1 | 9.5.0:b2 | 9.5.0:b3 | 9.5.0:p1 | 9.5.0:p2 | 9.5.0:p2_w1 | 9.5.0:p2_w2 | 9.5.0:rc1 | 9.5.1 | 9.5.1:b1 | 9.5.1:b2 | 9.5.1:b3 | 9.5.1:rc1 | 9.5.1:rc2 | 9.5.2 | 9.5.2:b1 | 9.5.2:p1 | 9.5.2:p2 | 9.5.2:p3 | 9.5.2:p4 | 9.5.2:rc1 | 9.5.3:b1 | 9.5.3:rc1 | 9.6.0 | 9.6.0:a1 | 9.6.0:b1 | 9.6.0:p1 | 9.6.0:rc1 | 9.6.0:rc2 | 9.6.1 | 9.6.1:b1 | 9.6.1:p1 | 9.6.1:p2 | 9.6.1:p3 | 9.6.1:rc1 | 9.6.2 | 9.6.2:b1 | 9.6.2:p1 | 9.6.2:p2 | 9.6.2:p3 | 9.6.2:rc1 | 9.6.3 | 9.6.3:b1 | 9.6.3:rc1 | 9.7.0 | 9.7.0:a1 | 9.7.0:a2 | 9.7.0:a3 | 9.7.0:b1 | 9.7.0:b2 | 9.7.0:b3 | 9.7.0:p1 | 9.7.0:p2 | 9.7.0:rc1 | 9.7.0:rc2 | 9.7.1 | 9.7.1:b1 | 9.7.1:p1 | 9.7.1:p2 | 9.7.1:rc1 | 9.7.2 | 9.7.2:p1 | 9.7.2:p2 | 9.7.2:p3 | 9.7.2:rc1 | 9.7.3 | 9.7.3:b1 | 9.7.3:p1 | 9.7.3:rc1 | 9.7.4 | 9.7.4:b1 | 9.7.4:rc1 | 9.8.0 | 9.8.0:a1 | 9.8.0:b1 | 9.8.0:p1 | 9.8.0:p2 | 9.8.0:p4 | 9.8.0:rc1 | 9.8.1 | 9.8.1:b1 | 9.8.1:b2 | 9.8.1:b3 | 9.8.1:rc1 | 9.9.0:a1 | 9.9.0:a2 | 9.9.0:a3 | 9.9.0:b1 | 9.4:b1 | 9.4:r1 | 9.4:r2 | 9.4:r3 | 9.4:r4 | 9.4:r4-p1 | 9.4:r5 | 9.4:r5-b1 | 9.4:r5-p1 | 9.4:r5-rc1 | 9.6 | 9.6:r1 | 9.6:r2 | 9.6:r3 | 9.6:r4 | 9.6:r4_p1 | 9.6:r5 | 9.6:r5_b1 | 9.6:r5_p1
3 vendors · 17 products
References
53 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14343VDB EntrySignatureX Refsource OVAL
- lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.htmlVendor AdvisoryX Refsource FEDORA
Show all 53 references
- lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.htmlVendor AdvisoryX Refsource FEDORA
- support.apple.com/kb/HT5501X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.htmlVendor AdvisoryX Refsource FEDORA
- blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_ofX Refsource CONFIRM