CVE-2016-1284

Published: Feb 4, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

Affected (4)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.9.8 s1
Isc Bind	Version 9.9.8 s2
Isc Bind	Version 9.9.8 s3
Isc Bind	Version 9.9.8 s4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.securitytracker.com/id/1034935

Source: cve@mitre.org

https://kb.isc.org/article/AA-01348

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

Release Notes

http://www.securitytracker.com/id/1034935

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.isc.org/article/AA-01348

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://kb.isc.org/article/AA-01438

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

Timeline

No history available yet.