CVE-2011-0414: ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cau...

Security readout for executives and security teams

This flaw can make an affected ISC BIND authoritative DNS server hang, disrupting DNS service for domains it serves. The trigger requires a remote query to coincide with an IXFR zone transfer or DDNS update. The bundle does not provide CVSS, active exploitation evidence, or a named fixed version. Exposure is most likely on authoritative BIND servers running versions 9.7.1 through 9.7.2-P3, especially where IXFR transfers or DDNS updates occur. Recursive-only deployments are not identified as affected in the provided description. Treat this as urgent for public authoritative DNS because outage impact can be business-visible. Priority is lower for systems not running affected BIND versions or not serving authoritative zones. Mitigation focus: Inventory authoritative BIND servers and identify versions 9.7.1 through 9.7.2-P3.; Check ISC and operating system vendor advisories for the corrected BIND package.; Prioritize updates for internet-facing authoritative DNS infrastructure..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.