named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 6.1.9 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.3 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.1.4 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Aix 7.2.0 Bind_advisory12 | — | — | Dec 19, 2016 | Mar 9, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Mar 9, 2016 |
| Centos_linux | — | Upgrade bind97-utilsUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-libsUpgrade bind97-chrootUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind97-libsUpgrade bind97Upgrade bind97-develUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-pkcs11-develUpgrade bind-sdb-chroot | Jul 6, 2016 | Mar 9, 2016 |
| Debian | — | Upgrade bind9 | Mar 10, 2016 | Mar 9, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 2, 2016 | Mar 9, 2016 |
| Freebsd | — | Upgrade bind99Upgrade bind98Upgrade bind910Upgrade bind9-develUpgrade FreeBSD | Dec 10, 2025 | Mar 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 9, 2016 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Mar 9, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory12 | Nov 30, 2017 | Mar 9, 2016 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3Upgrade network/dns/bind to version 9.6.3.11.6-0.175.3.8.0.5.0 on Solaris 11.3 | May 29, 2017 | Mar 9, 2016 |
| Oracle_linux | — | Upgrade bind-pkcs11Upgrade bind97Upgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind97-chrootUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-utilsUpgrade caching-nameserverUpgrade bind97-libsUpgrade bind-libbind-develUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-pkcs11-develUpgrade bind97-utilsUpgrade bindUpgrade bind-lite-develUpgrade bind97-devel | Mar 22, 2016 | Mar 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2016 |
| Suse | — | Upgrade libns1604Upgrade python-bindUpgrade libisc166-32bitUpgrade bind-utilsUpgrade libirs1601Upgrade libirs160Upgrade bind-libs-x86Upgrade libisccc160Upgrade python3-bindUpgrade libisc166Upgrade libdns1605Upgrade libisccfg1600Upgrade bind-libs-32bitUpgrade libisccc1600Upgrade bind-devel-32bitUpgrade bind-chrootenvUpgrade bind-docUpgrade libisccfg160Upgrade bindUpgrade libisc1606Upgrade liblwres160Upgrade bind-develUpgrade bind-libsUpgrade libdns169Upgrade libbind9-160Upgrade libirs-develUpgrade libbind9-1600 | Mar 22, 2016 | Mar 9, 2016 |
| Ubuntu | — | Upgrade bind9 | Mar 9, 2016 | Mar 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub