named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 6.1.9 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.3 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.4 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.2.0 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Mar 9, 2016 |
| Centos_linux | — | Upgrade bind97Upgrade bind-pkcs11-develUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind97-chrootUpgrade bind97-libsUpgrade bind-libsUpgrade bind97-develUpgrade bind-sdb-chrootUpgrade bind97-utilsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bindUpgrade bind-sdb | Jul 6, 2016 | Mar 9, 2016 |
| Debian | — | Upgrade bind9 | Mar 10, 2016 | Mar 9, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 2, 2016 | Mar 9, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade bind910Upgrade bind9-develUpgrade bind99Upgrade bind98 | Dec 10, 2025 | Mar 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 9, 2016 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Mar 9, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory12 | Nov 30, 2017 | Mar 9, 2016 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3 | May 29, 2017 | Mar 9, 2016 |
| Oracle_linux | — | Upgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind97-chrootUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind97Upgrade bind97-develUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-chrootUpgrade caching-nameserverUpgrade bind-libbind-develUpgrade bind-sdbUpgrade bind97-utilsUpgrade bindUpgrade bind-lite-develUpgrade bind97-libs | Mar 22, 2016 | Mar 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2016 |
| Suse | — | Upgrade libisccc160Upgrade libirs1601Upgrade libirs160Upgrade libisc166Upgrade python3-bindUpgrade bind-libs-x86Upgrade bind-utilsUpgrade libdns1605Upgrade libisc166-32bitUpgrade libisccc1600Upgrade python-bindUpgrade bind-libs-32bitUpgrade libns1604Upgrade libisccfg1600Upgrade libisccfg160Upgrade bindUpgrade bind-docUpgrade bind-devel-32bitUpgrade libbind9-160Upgrade bind-libsUpgrade libirs-develUpgrade bind-develUpgrade liblwres160Upgrade libdns169Upgrade libisc1606Upgrade bind-chrootenvUpgrade libbind9-1600 | Mar 22, 2016 | Mar 9, 2016 |
| Ubuntu | — | Upgrade bind9 | Mar 9, 2016 | Mar 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub