CVE-2011-2465

Published: 8 July 2011

Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.

Notes

Author	Note
mdeslaur	9.8.x only

Priority

Status

Package	Release	Status
bind9 Launchpad, Ubuntu, Debian	hardy	Not vulnerable (1:9.4.2.dfsg.P2-2ubuntu0.7)
	lucid	Not vulnerable (1:9.7.0.dfsg.P1-1ubuntu0.2)
	maverick	Not vulnerable (1:9.7.1.dfsg.P2-2ubuntu0.3)
	natty	Not vulnerable (1:9.7.3.dfsg-1ubuntu2.1)
	upstream	Released (9.8.0-p4)

References

http://www.isc.org/software/bind/advisories/cve-2011-2465
https://www.cve.org/CVERecord?id=CVE-2011-2465
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›