NetSight
IP …
medium6.8

CVE-2016-1285

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote…

Impact

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Affected products

VendorProductAffected versions
IscBind
from 9.0.0 before 9.9.8
from 9.10.0 before 9.10.3
Versions 9.9.8, 9.10.3
SuseLinux Enterprise Debuginfo
Version 11
SuseManager
Version 2.1
SuseManager Proxy
Version 2.1
SuseOpenstack Cloud
Version 5
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 11.4, 13.1, 13.2
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12
FedoraprojectFedora
Versions 22, 23, 24
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10

References