CVE-2011-1910

Name of the Vulnerable Software and Affected Versions ISC BIND versions prior to 9.7.3-P1 ISC BIND 9.8.x versions prior to 9.8.0-P2 ISC BIND 9.4-ESV versions prior to 9.4-ESV-R4-P1 ISC BIND 9.6-ESV versions prior to 9.6-ESV-R4-P1

Description The issue is caused by an off-by-one error in named, allowing remote DNS servers to cause a denial of service through a negative response containing large RRSIG RRsets, resulting in an assertion failure and daemon exit.

Recommendations For ISC BIND versions prior to 9.7.3-P1, update to version 9.7.3-P1 or later. For ISC BIND 9.8.x versions prior to 9.8.0-P2, update to version 9.8.0-P2 or later. For ISC BIND 9.4-ESV versions prior to 9.4-ESV-R4-P1, update to version 9.4-ESV-R4-P1 or later. For ISC BIND 9.6-ESV versions prior to 9.6-ESV-R4-P1, update to version 9.6-ESV-R4-P1 or later.