named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 6.1.9 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.3 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.4 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.2.0 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Mar 9, 2016 |
| Centos_linux | — | Upgrade bind-libs-liteUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind97-utilsUpgrade bind-develUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind97-develUpgrade bind97Upgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind97-libsUpgrade bind97-chrootUpgrade bind-libsUpgrade bind-pkcs11-devel | Jul 6, 2016 | Mar 9, 2016 |
| Debian | — | Upgrade bind9 | Mar 10, 2016 | Mar 9, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 2, 2016 | Mar 9, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade bind910Upgrade bind9-develUpgrade bind98Upgrade bind99 | Dec 10, 2025 | Mar 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 9, 2016 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Mar 9, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory12 | Nov 30, 2017 | Mar 9, 2016 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3 | May 29, 2017 | Mar 9, 2016 |
| Oracle_linux | — | Upgrade bind-libbind-develUpgrade bindUpgrade caching-nameserverUpgrade bind97-utilsUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind97-develUpgrade bind97-libsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-sdbUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind97Upgrade bind-libs-liteUpgrade bind97-chrootUpgrade bind-libsUpgrade bind-pkcs11-libs | Mar 22, 2016 | Mar 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2016 |
| Suse | — | Upgrade bindUpgrade libdns169Upgrade libirs-develUpgrade libbind9-1600Upgrade libisccfg160Upgrade bind-libsUpgrade libisc1606Upgrade bind-devel-32bitUpgrade libbind9-160Upgrade bind-docUpgrade bind-chrootenvUpgrade liblwres160Upgrade bind-develUpgrade libirs160Upgrade libisccc1600Upgrade libisc166-32bitUpgrade libirs1601Upgrade bind-libs-32bitUpgrade python-bindUpgrade libisc166Upgrade libisccc160Upgrade libns1604Upgrade libdns1605Upgrade bind-libs-x86Upgrade python3-bindUpgrade libisccfg1600Upgrade bind-utils | Mar 22, 2016 | Mar 9, 2016 |
| Ubuntu | — | Upgrade bind9 | Mar 9, 2016 | Mar 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub