Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-1910

31
FAUCET Score

CVE-2011-1910 describes an off-by-one error in ISC BIND versions 9.x, 9.4-ESV, and 9.6-ESV that allows remote DNS servers to trigger a denial of service. The vulnerability, rated with a CVSS score of 5.0, can be exploited remotely with low attack complexity, leading to an assertion failure and daemon exit. While the FAUCET Risk Score is high at 89/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
9.0CPE matchmatch criteria
cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
24.64%
Probability of exploitation in next 30 days
EPSS Percentile
97.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.2464 is in the 98th percentile among its peer group of 23,703 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: bind97-32:9.7.0-6.P2.el5_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: bind-32:9.7.3-2.el6_1.P1.1
View patch

Vendor Advisories (1)

redhatCVE-2011-1910Important

bind: Large RRSIG RRsets and Negative Caching can crash named

May 26, 2011

References

lists.apple.com / archives/Security-announce/2011//Oct/msg00003.html
lists.fedoraproject.org / pipermail/package-announce/2011-June/061082.html
lists.fedoraproject.org / pipermail/package-announce/2011-June/061401.html
lists.fedoraproject.org / pipermail/package-announce/2011-June/061405.html
marc.info
osvdb.org / 72540
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/44677
secunia.com / advisories/44719
Vendor Advisory
secunia.com / advisories/44741
secunia.com / advisories/44744
secunia.com / advisories/44758
secunia.com / advisories/44762
secunia.com / advisories/44783
secunia.com / advisories/44929
security.freebsd.org / advisories/FreeBSD-SA-11:02.bind.asc
hermes.opensuse.org / messages/8699912
slackware.com / security/viewer.php
support.apple.com / kb/HT5002
isc.org / software/bind/advisories/cve-2011-1910
Vendor Advisory
debian.org / security/2011/dsa-2244
kb.cert.org / vuls/id/795694
US Government Resource
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2011-0845.html
securityfocus.com / bid/48007
securitytracker.com / id