CVE-2016-1286

bind: malformed signature records for DNAME records can trigger assertion failure

Published Mar 9, 2016 CVSS 3.1 · 8.6 High EPSS 60.8% KEV · Not listed
Description
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3511-1 bind9 security update
Ubuntu USN Ubuntu USN USN-2925-1 Bind vulnerabilities
References
Link Providers
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=146191105921542&w=2 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2016-0562.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2016-0601.html cve-icon cve-icon
http://www.debian.org/security/2016/dsa-3511 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html cve-icon cve-icon
http://www.securitytracker.com/id/1035237 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2925-1 cve-icon cve-icon
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821 cve-icon cve-icon
https://kb.isc.org/article/AA-01353 cve-icon cve-icon cve-icon
https://kb.isc.org/article/AA-01380 cve-icon cve-icon
https://kb.isc.org/article/AA-01438 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2016-1286 cve-icon
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc cve-icon cve-icon
https://security.gentoo.org/glsa/201610-07 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2016-1286 cve-icon
History
Type Values Removed Values Added
Metrics epss

{'score': 0.70973}

epss

{'score': 0.71553}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 10:48 PM
Reserved
Jan 4, 2016, 12:00 AM
Status
Modified
Published
Mar 9, 2016, 11:59 PM
Modified
Jun 17, 2026, 12:41 AM
Severity
Important
Public date
Mar 9, 2016, 12:00 AM