CVE-2016-1286

Description

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

Risk Information

Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS Score
Exploitation Probability
52.454

Associated Vulnerability

VulnerabilityOS Platform
Update bind 9.9.8 to latest versionWindows
Multiple Vulnerabilities are affected in BIND 9.9.3Windows
Internet Domain Name Server (USN-2925-1) bind9_9.9.5.dfsg-3ubuntu0.8_i386.debLinux
Internet Domain Name Server (USN-2925-1) bind9_9.9.5.dfsg-3ubuntu0.8_amd64.debLinux
Internet Domain Name Server (USN-2925-1) bind9_9.9.5.dfsg-11ubuntu1.3_i386.debLinux
Internet Domain Name Server (USN-2925-1) bind9_9.9.5.dfsg-11ubuntu1.3_amd64.debLinux
Internet Domain Name Server (USN-2925-1) bind9_9.8.1.dfsg.P1-4ubuntu0.16_i386.debLinux
Internet Domain Name Server (USN-2925-1) bind9_9.8.1.dfsg.P1-4ubuntu0.16_amd64.debLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Server 12 ) bind-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Server 12 ) bind-chrootenv-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-debuginfo-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-debugsource-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Server 12 ) bind-doc-9.9.6P1-28.12.1.noarch.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-libs-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-libs-32bit-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-libs-debuginfo-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-libs-debuginfo-32bit-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-utils-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0780-1(SUSE Linux Enterprise Desktop 12 ) bind-utils-debuginfo-9.9.6P1-28.12.1.x86_64.rpmLinux
SUSE-SU-2016:0825-1(SUSE Linux Enterprise Desktop 11-SP4 ) bind-libs-9.9.6P1-0.25.1.x86_64.rpmLinux
SUSE-SU-2016:0825-1(SUSE Linux Enterprise Desktop 11-SP4 ) bind-libs-32bit-9.9.6P1-0.25.1.x86_64.rpmLinux
SUSE-SU-2016:0825-1(SUSE Linux Enterprise Desktop 11-SP4 ) bind-utils-9.9.6P1-0.25.1.x86_64.rpmLinux
CVE-2016-1286NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234