apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 6.1.9 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.3 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.1.4 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Aix 7.2.0 Bind_advisory11 | — | — | Dec 19, 2016 | Jan 20, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jan 20, 2016 |
| Centos_linux | — | Upgrade bind-lite-develUpgrade bind-chrootUpgrade bind-utilsUpgrade bind97-chrootUpgrade bind-libs-liteUpgrade bind97-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind97-libsUpgrade bind97-develUpgrade caching-nameserverUpgrade bind-develUpgrade bind-libbind-develUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-sdbUpgrade bind97Upgrade bind-license | Jul 6, 2016 | Jan 20, 2016 |
| Debian | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 1, 2016 | Jan 20, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 25, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade bind910Upgrade bind99 | Dec 10, 2025 | Jan 22, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 20, 2016 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Jan 20, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory11 | Nov 30, 2017 | Jan 20, 2016 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3 | May 29, 2017 | Jan 20, 2016 |
| Oracle_linux | — | Upgrade bind97-libsUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind97-utilsUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind97-chrootUpgrade bind97-develUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-libsUpgrade bind-sdbUpgrade bind97Upgrade bindUpgrade caching-nameserverUpgrade bind-chrootUpgrade bind-libbind-devel | Oct 6, 2017 | Jan 20, 2016 |
| Suse | — | Upgrade bind-libsUpgrade libbind9-1600Upgrade liblwres160Upgrade bind-docUpgrade libisccfg160Upgrade libisc166-32bitUpgrade libns1604Upgrade libbind9-160Upgrade libdns1605Upgrade bind-libs-x86Upgrade libisc1606Upgrade libdns169Upgrade libirs1601Upgrade bind-devel-32bitUpgrade libisc166Upgrade libirs-develUpgrade bind-libs-32bitUpgrade bindUpgrade libisccc160Upgrade bind-chrootenvUpgrade bind-develUpgrade bind-utilsUpgrade python3-bindUpgrade libisccc1600Upgrade libisccfg1600Upgrade libirs160Upgrade python-bind | Feb 2, 2016 | Jan 20, 2016 |
| Ubuntu | — | Upgrade bind9 | Feb 2, 2016 | Jan 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub