CVE-2016-1285
Fixed in a distro release EPSS 57%
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Products: isc bind, suse linux_enterprise_debuginfo, suse manager, suse manager_proxy, suse openstack_cloud, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, fedoraproject fedora, canonical ubuntu_linux, debian_linux, juniper junos
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bind9 | 1:9.10.3.dfsg.P4-6 |
| Debian 13 | bind9 | 1:9.10.3.dfsg.P4-6 |
| Debian 14 | bind9 | 1:9.10.3.dfsg.P4-6 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 |
| Debian 8 | bind9 | 1:9.9.5.dfsg-9+deb8u6 |
| Red Hat Enterprise Linux 5 | bind | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-chroot | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-debuginfo | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-devel | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-libbind-devel | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-libs | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-sdb | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind-utils | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 5 | bind97 | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | bind97-chroot | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | bind97-debuginfo | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | bind97-devel | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | bind97-libs | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | bind97-utils | 32:9.7.0-21.P2.el5_11.6 |
| Red Hat Enterprise Linux 5 | caching-nameserver | 30:9.3.6-25.P1.el5_11.8 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.37.rc1.el6_7.7 |
| Red Hat Enterprise Linux 7 | bind | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-chroot | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-debuginfo | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-devel | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-libs | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-libs-lite | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-license | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-lite-devel | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-pkcs11 | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-devel | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-libs | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-utils | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-sdb | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-sdb-chroot | 32:9.9.4-29.el7_2.3 |
| Red Hat Enterprise Linux 7 | bind-utils | 32:9.9.4-29.el7_2.3 |
| Red Hat rhel aus 6.4 | bind | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-chroot | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-devel | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-libs | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-sdb | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.4 | bind-utils | 32:9.8.2-0.17.rc1.el6_4.8 |
| Red Hat rhel aus 6.5 | bind | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-chroot | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-debuginfo | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-devel | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-libs | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-sdb | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel aus 6.5 | bind-utils | 32:9.8.2-0.23.rc1.el6_5.3 |
| Red Hat rhel eus 6.6 | bind | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-chroot | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-debuginfo | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-devel | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-libs | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-sdb | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel eus 6.6 | bind-utils | 32:9.8.2-0.30.rc1.el6_6.5 |
| Red Hat rhel mission critical 6.2 | bind | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-chroot | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-debuginfo | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-devel | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-libs | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-sdb | 32:9.7.3-8.P3.el6_2.4 |
| Red Hat rhel mission critical 6.2 | bind-utils | 32:9.7.3-8.P3.el6_2.4 |
| SUSE Linux Enterprise Desktop 11 SP4 | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Desktop 12 | bind | 9.9.6P1-28.12.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | bind | 9.9.6P1-38.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Server 11 SP4 | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Server 12 | bind | 9.9.6P1-28.12.1 |
| SUSE Linux Enterprise Server 12 SP1 | bind | 9.9.6P1-38.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | bind | 9.9.6P1-28.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | bind | 9.9.6P1-38.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | bind | 9.9.6P1-0.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 | bind | 9.9.6P1-28.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | bind | 9.9.6P1-38.1 |
| SUSE Manager 2.1 | bind | 9.9.6P1-0.27.1 |
| SUSE Manager Proxy 2.1 | bind | 9.9.6P1-0.27.1 |
| SUSE OpenStack Cloud 5 | bind | 9.9.6P1-0.27.1 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.8 |
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 |