apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 6.1.9 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.3 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.4 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.2.0 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jan 20, 2016 |
| Centos_linux | — | Upgrade bind-libbind-develUpgrade bind97Upgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-develUpgrade bind-licenseUpgrade bindUpgrade bind97-libsUpgrade bind97-chrootUpgrade caching-nameserverUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind97-develUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade bind97-utils | Jul 6, 2016 | Jan 20, 2016 |
| Debian | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 1, 2016 | Jan 20, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 25, 2016 |
| Freebsd | — | Upgrade bind910Upgrade FreeBSDUpgrade bind99 | Dec 10, 2025 | Jan 22, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 20, 2016 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Jan 20, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory11 | Nov 30, 2017 | Jan 20, 2016 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3 | May 29, 2017 | Jan 20, 2016 |
| Oracle_linux | — | Upgrade caching-nameserverUpgrade bind-libbind-develUpgrade bind97-develUpgrade bind-lite-develUpgrade bind-chrootUpgrade bindUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-libsUpgrade bind97Upgrade bind97-chrootUpgrade bind-licenseUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind97-utilsUpgrade bind97-libsUpgrade bind-pkcs11-develUpgrade bind-pkcs11 | Oct 6, 2017 | Jan 20, 2016 |
| Suse | — | Upgrade libisccc1600Upgrade bind-utilsUpgrade bind-devel-32bitUpgrade python3-bindUpgrade bindUpgrade libisc166Upgrade libirs-develUpgrade libirs160Upgrade bind-develUpgrade bind-chrootenvUpgrade libisccfg1600Upgrade libisccc160Upgrade python-bindUpgrade bind-libs-32bitUpgrade bind-libsUpgrade libns1604Upgrade libdns1605Upgrade libbind9-160Upgrade liblwres160Upgrade libirs1601Upgrade libisc1606Upgrade libbind9-1600Upgrade bind-docUpgrade libdns169Upgrade libisccfg160Upgrade bind-libs-x86Upgrade libisc166-32bit | Feb 2, 2016 | Jan 20, 2016 |
| Ubuntu | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub