CVE-2016-1285 named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (...
MediumCVSS 6.8
EPSS 57.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bind9(Debian:12) | < 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
| debian/bind9(Debian:13) | < 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
| debian/bind9(Debian:14) | < 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
| isc bind | >= 9.0.0, < 9.9.8 | 9.9.8 |
| isc bind | >= 9.10.0, < 9.10.3 | 9.10.3 |
| isc bind | = 9.9.8 | No fix listed |
| isc bind | = 9.9.8-p2 | No fix listed |
| isc bind | = 9.9.8-p3 | No fix listed |
| isc bind | = 9.9.8-rc1 | No fix listed |
| isc bind | = 9.10.3 | No fix listed |
| isc bind | = 9.10.3-beta1 | No fix listed |
| isc bind | = 9.10.3-p1 | No fix listed |
| isc bind | = 9.10.3-p2 | No fix listed |
| isc bind | = 9.10.3-p3 | No fix listed |
| isc bind | = 9.10.3-rc1 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp2 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp3 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE manager | = 2.1 | No fix listed |
| SUSE manager proxy | = 2.1 | No fix listed |
| SUSE openstack cloud | = 5 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
Show 170 more
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise desktop | = 11-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| juniper junos | = 12.1x46 | No fix listed |
| juniper junos | = 12.1x46-d10 | No fix listed |
| juniper junos | = 12.1x46-d15 | No fix listed |
| juniper junos | = 12.1x46-d20 | No fix listed |
| juniper junos | = 12.1x46-d25 | No fix listed |
| juniper junos | = 12.1x46-d30 | No fix listed |
| juniper junos | = 12.1x46-d35 | No fix listed |
| juniper junos | = 12.1x46-d40 | No fix listed |
| juniper junos | = 12.1x46-d45 | No fix listed |
| juniper junos | = 12.1x46-d50 | No fix listed |
| juniper junos | = 12.1x46-d55 | No fix listed |
| juniper junos | = 12.1x46-d60 | No fix listed |
| juniper junos | = 12.1x46-d65 | No fix listed |
| juniper junos | = 12.1x46-d66 | No fix listed |
| juniper junos | = 12.1x46-d67 | No fix listed |
| juniper junos | = 12.1x46-d70 | No fix listed |
| juniper junos | = 12.1x46-d71 | No fix listed |
| juniper junos | = 12.1x46-d72 | No fix listed |
| juniper junos | = 12.1x46-d73 | No fix listed |
| juniper junos | = 12.1x46-d76 | No fix listed |
| juniper junos | = 12.1x46-d77 | No fix listed |
| juniper junos | = 12.3x48 | No fix listed |
| juniper junos | = 12.3x48-d10 | No fix listed |
| juniper junos | = 12.3x48-d15 | No fix listed |
| juniper junos | = 12.3x48-d20 | No fix listed |
| juniper junos | = 12.3x48-d25 | No fix listed |
| juniper junos | = 12.3x48-d30 | No fix listed |
| juniper junos | = 12.3x48-d35 | No fix listed |
| juniper junos | = 12.3x48-d40 | No fix listed |
| juniper junos | = 12.3x48-d45 | No fix listed |
| juniper junos | = 12.3x48-d50 | No fix listed |
| juniper junos | = 12.3x48-d51 | No fix listed |
| juniper junos | = 12.3x48-d55 | No fix listed |
| juniper junos | = 12.3x48-d60 | No fix listed |
| juniper junos | = 12.3x48-d65 | No fix listed |
| juniper junos | = 12.3x48-d66 | No fix listed |
| juniper junos | = 12.3x48-d70 | No fix listed |
| juniper junos | = 12.3x48-d75 | No fix listed |
| juniper junos | = 15.1x49-d10 | No fix listed |
| juniper junos | = 15.1x49-d100 | No fix listed |
| juniper junos | = 15.1x49-d110 | No fix listed |
| juniper junos | = 15.1x49-d120 | No fix listed |
| juniper junos | = 15.1x49-d130 | No fix listed |
| juniper junos | = 15.1x49-d131 | No fix listed |
| juniper junos | = 15.1x49-d140 | No fix listed |
| juniper junos | = 15.1x49-d15 | No fix listed |
| juniper junos | = 15.1x49-d150 | No fix listed |
| juniper junos | = 15.1x49-d160 | No fix listed |
| juniper junos | = 15.1x49-d170 | No fix listed |
| juniper junos | = 15.1x49-d180 | No fix listed |
| juniper junos | = 15.1x49-d20 | No fix listed |
| juniper junos | = 15.1x49-d25 | No fix listed |
| juniper junos | = 15.1x49-d30 | No fix listed |
| juniper junos | = 15.1x49-d35 | No fix listed |
| juniper junos | = 15.1x49-d40 | No fix listed |
| juniper junos | = 15.1x49-d45 | No fix listed |
| juniper junos | = 15.1x49-d50 | No fix listed |
| juniper junos | = 15.1x49-d55 | No fix listed |
| juniper junos | = 15.1x49-d60 | No fix listed |
| juniper junos | = 15.1x49-d65 | No fix listed |
| juniper junos | = 15.1x49-d70 | No fix listed |
| juniper junos | = 15.1x49-d75 | No fix listed |
| juniper junos | = 15.1x49-d80 | No fix listed |
| juniper junos | = 15.1x49-d90 | No fix listed |
| juniper junos | = 17.3 | No fix listed |
| juniper junos | = 17.3-r1 | No fix listed |
| juniper junos | = 17.3-r1-s1 | No fix listed |
| juniper junos | = 17.3-r1-s4 | No fix listed |
| juniper junos | = 17.3-r2 | No fix listed |
| juniper junos | = 17.3-r2-s1 | No fix listed |
| juniper junos | = 17.3-r2-s2 | No fix listed |
| juniper junos | = 17.3-r2-s3 | No fix listed |
| juniper junos | = 17.3-r2-s4 | No fix listed |
| juniper junos | = 17.3-r2-s5 | No fix listed |
| juniper junos | = 17.3-r3 | No fix listed |
| juniper junos | = 17.3-r3-s1 | No fix listed |
| juniper junos | = 17.3-r3-s2 | No fix listed |
| juniper junos | = 17.3-r3-s3 | No fix listed |
| juniper junos | = 17.3-r3-s4 | No fix listed |
| juniper junos | = 17.3-r3-s5 | No fix listed |
| juniper junos | = 17.3-r3-s6 | No fix listed |
| juniper junos | = 17.4 | No fix listed |
| juniper junos | = 17.4-r1 | No fix listed |
| juniper junos | = 17.4-r1-s1 | No fix listed |
| juniper junos | = 17.4-r1-s2 | No fix listed |
| juniper junos | = 17.4-r1-s3 | No fix listed |
| juniper junos | = 17.4-r1-s4 | No fix listed |
| juniper junos | = 17.4-r1-s5 | No fix listed |
| juniper junos | = 17.4-r1-s6 | No fix listed |
| juniper junos | = 17.4-r1-s7 | No fix listed |
| juniper junos | = 17.4-r2 | No fix listed |
| juniper junos | = 17.4-r2-s1 | No fix listed |
| juniper junos | = 17.4-r2-s10 | No fix listed |
| juniper junos | = 17.4-r2-s11 | No fix listed |
| juniper junos | = 17.4-r2-s12 | No fix listed |
| juniper junos | = 17.4-r2-s13 | No fix listed |
| juniper junos | = 17.4-r2-s2 | No fix listed |
| juniper junos | = 17.4-r2-s3 | No fix listed |
| juniper junos | = 17.4-r2-s4 | No fix listed |
| juniper junos | = 17.4-r2-s5 | No fix listed |
| juniper junos | = 17.4-r2-s6 | No fix listed |
| juniper junos | = 17.4-r2-s7 | No fix listed |
| juniper junos | = 17.4-r2-s8 | No fix listed |
| juniper junos | = 17.4-r2-s9 | No fix listed |
| juniper junos | = 18.1 | No fix listed |
| juniper junos | = 18.1-r1 | No fix listed |
| juniper junos | = 18.1-r2 | No fix listed |
| juniper junos | = 18.1-r2-s1 | No fix listed |
| juniper junos | = 18.1-r2-s2 | No fix listed |
| juniper junos | = 18.1-r2-s4 | No fix listed |
| juniper junos | = 18.1-r3 | No fix listed |
| juniper junos | = 18.1-r3-s1 | No fix listed |
| juniper junos | = 18.1-r3-s13 | No fix listed |
| juniper junos | = 18.1-r3-s2 | No fix listed |
| juniper junos | = 18.1-r3-s3 | No fix listed |
| juniper junos | = 18.1-r3-s4 | No fix listed |
| juniper junos | = 18.1-r3-s5 | No fix listed |
| juniper junos | = 18.1-r3-s6 | No fix listed |
| juniper junos | = 18.1-r3-s7 | No fix listed |
| juniper junos | = 18.1-r3-s8 | No fix listed |
| juniper junos | = 18.2 | No fix listed |
| juniper junos | = 18.2-r1 | No fix listed |
| juniper junos | = 18.2-r1-s2 | No fix listed |
| juniper junos | = 18.2-r1-s3 | No fix listed |
| juniper junos | = 18.2-r1-s4 | No fix listed |
| juniper junos | = 18.2-r1-s5 | No fix listed |
| juniper junos | = 18.2-r2 | No fix listed |
| juniper junos | = 18.2-r2-s1 | No fix listed |
| juniper junos | = 18.2-r2-s2 | No fix listed |
| juniper junos | = 18.2-r2-s3 | No fix listed |
| juniper junos | = 18.2-r2-s4 | No fix listed |
| juniper junos | = 18.2-r2-s5 | No fix listed |
| juniper junos | = 18.2-r2-s6 | No fix listed |
| juniper junos | = 18.2-r2-s7 | No fix listed |
| juniper junos | = 18.2-r2-s8 | No fix listed |
| juniper junos | = 18.3 | No fix listed |
| juniper junos | = 18.3-r1 | No fix listed |
| juniper junos | = 18.3-r1-s1 | No fix listed |
| juniper junos | = 18.3-r1-s2 | No fix listed |
| juniper junos | = 18.3-r1-s3 | No fix listed |
| juniper junos | = 18.3-r1-s4 | No fix listed |
| juniper junos | = 18.3-r1-s5 | No fix listed |
| juniper junos | = 18.3-r1-s6 | No fix listed |
| juniper junos | = 18.4 | No fix listed |
| juniper junos | = 18.4-r1 | No fix listed |
| juniper junos | = 18.4-r1-s1 | No fix listed |
| juniper junos | = 18.4-r1-s2 | No fix listed |
| juniper junos | = 18.4-r1-s3 | No fix listed |
| juniper junos | = 18.4-r1-s4 | No fix listed |
| juniper junos | = 18.4-r1-s5 | No fix listed |
References
- Debian Security Tracker CVE-2016-1285 vendor-advisory
- FEDORA-2016-364c0a9df4 mailing-list vendor-advisory
- FEDORA-2016-161b73fc2c mailing-list vendor-advisory
- FEDORA-2016-b593e84223 mailing-list vendor-advisory
- FEDORA-2016-5047abe4a9 mailing-list vendor-advisory
- FEDORA-2016-75f31fbb0a mailing-list vendor-advisory
- FEDORA-2016-dce6dbe6a8 mailing-list vendor-advisory
- SUSE-SU-2016:0759 mailing-list vendor-advisory
- SUSE-SU-2016:0780 mailing-list vendor-advisory
- SUSE-SU-2016:0825 mailing-list vendor-advisory
- openSUSE-SU-2016:0827 mailing-list vendor-advisory
- openSUSE-SU-2016:0830 mailing-list vendor-advisory
- openSUSE-SU-2016:0834 mailing-list vendor-advisory
- openSUSE-SU-2016:0859 mailing-list vendor-advisory
- SUSE-SU-2016:1541 mailing-list third-party-advisory vendor-advisory
- HPSBUX03583 issue-tracking third-party-advisory vendor-advisory
- RHSA-2016:0562 third-party-advisory vendor-advisory
- RHSA-2016:0601 third-party-advisory vendor-advisory
- DSA-3511 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 1035236 broken-link third-party-advisory vdb-entry
- USN-2925-1 third-party-advisory vendor-advisory
- h20566.www2.hpe.com third-party-advisory
- kb.isc.org vendor-advisory
- kb.isc.org broken-link release-notes
- kb.isc.org broken-link
- FreeBSD-SA-16:13 third-party-advisory vendor-advisory
- GLSA-201610-07 third-party-advisory vendor-advisory