Description

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.

References

• BID-95390
• DEBIAN-DLA-805-1
• DEBIAN-DSA-3758
• GENTOO-GLSA-201708-01
• NVD-CVE-2016-9147
• SECTRACK-1037582
• UBUNTU-USN-3172-1

Solution

Related Vulnerabilities

• Oracle Linux: (CVE-2016-9147) (Multiple Advisories): bind97 security update
• Juniper Junos OS: 2017-04 Security Bulletin: SRX, vSRX and J-Series: Multiple vulnerabilities in ISC BIND named. (JSA10785) (multiple CVEs)
• Alpine Linux: CVE-2016-9147: bind Multiple security issues
• ISC BIND: An error handling a query response containing inconsistent DNSSEC information could cause an assertion failure (CVE-2016-9147)
• Red Hat: CVE-2016-9147: Important: bind security and bug fix update ((Multiple Advisories))
• Oracle Solaris 11: CVE-2016-9147: Vulnerability in Bind
• SUSE: CVE-2016-9147: SUSE Linux Security Advisory
• Gentoo Linux: CVE-2016-9147: BIND: Multiple vulnerabilities
• Huawei EulerOS: CVE-2016-9147: bind security update
• Ubuntu: USN-3172-1 (CVE-2016-9147): Bind vulnerabilities
• FreeBSD: VID-D4C7E9A9-D893-11E6-9B4D-D050996490D0 (CVE-2016-9147): BIND -- multiple vulnerabilities
• F5 Networks: K02138183 (CVE-2016-9147): BIND vulnerability CVE-2016-9147
• Huawei EulerOS: CVE-2016-9147: bind security update
• Amazon Linux AMI: CVE-2016-9147: Security patch for bind (ALAS-2017-798)
• CentOS: (CVE-2016-9147) (Multiple Advisories): bind97