apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 6.1.9 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.3 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.4 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.2.0 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jan 20, 2016 |
| Centos_linux | — | Upgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind97-develUpgrade bind97-utilsUpgrade bind97-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade caching-nameserverUpgrade bind97-chrootUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-libsUpgrade bind-sdbUpgrade bind-libbind-develUpgrade bind-sdb-chrootUpgrade bind97Upgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-devel | Jul 6, 2016 | Jan 20, 2016 |
| Debian | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 1, 2016 | Jan 20, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 25, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade bind910Upgrade bind99 | Dec 10, 2025 | Jan 22, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 20, 2016 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jan 20, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory11 | Nov 30, 2017 | Jan 20, 2016 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3Upgrade network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3 | May 29, 2017 | Jan 20, 2016 |
| Oracle_linux | — | Upgrade bind-licenseUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind97-libsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind97-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade caching-nameserverUpgrade bind-libbind-develUpgrade bind-chrootUpgrade bind97-chrootUpgrade bind-lite-develUpgrade bind-libsUpgrade bind97Upgrade bindUpgrade bind-utilsUpgrade bind-sdbUpgrade bind97-devel | Oct 6, 2017 | Jan 20, 2016 |
| Suse | — | Upgrade bind-devel-32bitUpgrade libirs-develUpgrade libisc166Upgrade libisccc160Upgrade bind-utilsUpgrade bind-chrootenvUpgrade libisccc1600Upgrade bindUpgrade python3-bindUpgrade bind-develUpgrade python-bindUpgrade bind-libs-32bitUpgrade libirs160Upgrade libisccfg1600Upgrade libbind9-1600Upgrade libns1604Upgrade bind-libs-x86Upgrade libdns169Upgrade bind-libsUpgrade libbind9-160Upgrade libisc1606Upgrade libdns1605Upgrade libisccfg160Upgrade libisc166-32bitUpgrade liblwres160Upgrade libirs1601Upgrade bind-doc | Feb 2, 2016 | Jan 20, 2016 |
| Ubuntu | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub