named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 6.1.9 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.3 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.4 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.2.0 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Mar 9, 2016 |
| Centos_linux | — | Upgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind97Upgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind97-develUpgrade bind-chrootUpgrade bind97-chrootUpgrade bind97-libsUpgrade bind-libsUpgrade bind-pkcs11Upgrade bindUpgrade bind-sdbUpgrade bind97-utilsUpgrade bind-libs-liteUpgrade bind-license | Jul 6, 2016 | Mar 9, 2016 |
| Debian | — | Upgrade bind9 | Mar 10, 2016 | Mar 9, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 2, 2016 | Mar 9, 2016 |
| Freebsd | — | Upgrade bind99Upgrade bind98Upgrade bind910Upgrade bind9-develUpgrade FreeBSD | Dec 10, 2025 | Mar 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 9, 2016 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Mar 9, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory12 | Nov 30, 2017 | Mar 9, 2016 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3Upgrade network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3 | May 29, 2017 | Mar 9, 2016 |
| Oracle_linux | — | Upgrade bind-utilsUpgrade bind-libbind-develUpgrade bind97-utilsUpgrade bind97-develUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind97-libsUpgrade bind-licenseUpgrade bind-lite-develUpgrade bindUpgrade bind-chrootUpgrade caching-nameserverUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind97-chrootUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind97Upgrade bind-libsUpgrade bind-libs-lite | Mar 22, 2016 | Mar 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2016 |
| Suse | — | Upgrade libdns169Upgrade libisc1606Upgrade bind-chrootenvUpgrade libbind9-160Upgrade libisccfg160Upgrade libbind9-1600Upgrade bindUpgrade bind-docUpgrade bind-develUpgrade bind-devel-32bitUpgrade libirs-develUpgrade liblwres160Upgrade bind-libsUpgrade libirs160Upgrade libdns1605Upgrade libisc166Upgrade bind-libs-x86Upgrade libirs1601Upgrade python3-bindUpgrade libisccc160Upgrade libns1604Upgrade python-bindUpgrade bind-utilsUpgrade libisccc1600Upgrade libisc166-32bitUpgrade libisccfg1600Upgrade bind-libs-32bit | Mar 22, 2016 | Mar 9, 2016 |
| Ubuntu | — | Upgrade bind9 | Mar 9, 2016 | Mar 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub