Ubuntu Security Notice (C) 2011-2016 Canonical, Inc. / NASL script (C) 2011-2016 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related
It was discovered that Bind incorrectly handled certain bad signatures
if multiple trust anchors existed for a single zone. A remote attacker
could use this flaw to cause Bind to stop responding, resulting in a
denial of service. This issue only affected Ubuntu 8.04 LTS and 10.04
Frank Kloeker and Michael Sinatra discovered that Bind incorrectly
handled certain very large RRSIG RRsets included in negative
responses. A remote attacker could use this flaw to cause Bind to stop
responding, resulting in a denial of service. (CVE-2011-1910).
Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : true