CVE-2016-9444

bind: assertion failure while handling an unusually-formed DS record response

Published Jan 12, 2017 CVSS 3.0 · 7.5 High EPSS 18.1% KEV · Not listed
Description
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-805-1 bind9 security update
Debian DSA Debian DSA DSA-3758-1 bind9 security update
Ubuntu USN Ubuntu USN USN-3172-1 Bind vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 2:50 AM
Reserved
Nov 18, 2016, 12:00 AM
Status
Modified
Published
Jan 12, 2017, 6:59 AM
Modified
Jun 17, 2026, 12:56 AM
Severity
Important
Public date
Jan 11, 2017, 12:00 AM