CVE-2016-1285

Published: Mar 9, 2016Modified: May 6, 2026

6.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 4.0

Source: NVD

Description

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Affected (195)

Products: Isc: Bind · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Manager, Manager Proxy, Openstack Cloud · +4 more

Show all products

1 product

2 products

7 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

1 product

1 product

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.0.0 to 9.9.8
Isc Bind	From 9.10.0 to 9.10.3
Isc Bind	Version 9.10.3
Isc Bind	Version 9.10.3 beta1
Isc Bind	Version 9.10.3 p1
Isc Bind	Version 9.10.3 p2
Isc Bind	Version 9.10.3 p3
Isc Bind	Version 9.10.3 rc1
Isc Bind	Version 9.9.8
Isc Bind	Version 9.9.8 p2
Isc Bind	Version 9.9.8 p3
Isc Bind	Version 9.9.8 rc1

Configuration B

21 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Debuginfo	Version 11 sp2
Suse Linux Enterprise Debuginfo	Version 11 sp3
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Desktop	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Desktop	Version 12 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Software Development Kit	Version 12 sp1
Suse Manager	Version 2.1
Suse Manager Proxy	Version 2.1
Suse Openstack Cloud	Version 5

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 22
Fedoraproject Fedora	Version 23
Fedoraproject Fedora	Version 24

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration F

153 vulnerable · 33 platform

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x46-d10
Juniper Junos	Version 12.1x46-d76
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25
Juniper Junos	Version 12.1x46 d30
Juniper Junos	Version 12.1x46 d35
Juniper Junos	Version 12.1x46 d40
Juniper Junos	Version 12.1x46 d45
Juniper Junos	Version 12.1x46 d50
Juniper Junos	Version 12.1x46 d55
Juniper Junos	Version 12.1x46 d60
Juniper Junos	Version 12.1x46 d65
Juniper Junos	Version 12.1x46 d66
Juniper Junos	Version 12.1x46 d67
Juniper Junos	Version 12.1x46 d70
Juniper Junos	Version 12.1x46 d71
Juniper Junos	Version 12.1x46 d72
Juniper Junos	Version 12.1x46 d73
Juniper Junos	Version 12.1x46 d76
Juniper Junos	Version 12.1x46 d77
Juniper Junos	Version 12.3x48
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 12.3x48 d20
Juniper Junos	Version 12.3x48 d25
Juniper Junos	Version 12.3x48 d30
Juniper Junos	Version 12.3x48 d35
Juniper Junos	Version 12.3x48 d40
Juniper Junos	Version 12.3x48 d45
Juniper Junos	Version 12.3x48 d50
Juniper Junos	Version 12.3x48 d51
Juniper Junos	Version 12.3x48 d55
Juniper Junos	Version 12.3x48 d60
Juniper Junos	Version 12.3x48 d65
Juniper Junos	Version 12.3x48 d66
Juniper Junos	Version 12.3x48 d70
Juniper Junos	Version 12.3x48 d75
Juniper Junos	Version 15.1x49 d100
Juniper Junos	Version 15.1x49 d10
Juniper Junos	Version 15.1x49 d110
Juniper Junos	Version 15.1x49 d120
Juniper Junos	Version 15.1x49 d130
Juniper Junos	Version 15.1x49 d131
Juniper Junos	Version 15.1x49 d140
Juniper Junos	Version 15.1x49 d150
Juniper Junos	Version 15.1x49 d15
Juniper Junos	Version 15.1x49 d160
Juniper Junos	Version 15.1x49 d170
Juniper Junos	Version 15.1x49 d180
Juniper Junos	Version 15.1x49 d20
Juniper Junos	Version 15.1x49 d25
Juniper Junos	Version 15.1x49 d30
Juniper Junos	Version 15.1x49 d35
Juniper Junos	Version 15.1x49 d40
Juniper Junos	Version 15.1x49 d45
Juniper Junos	Version 15.1x49 d50
Juniper Junos	Version 15.1x49 d55
Juniper Junos	Version 15.1x49 d60
Juniper Junos	Version 15.1x49 d65
Juniper Junos	Version 15.1x49 d70
Juniper Junos	Version 15.1x49 d75
Juniper Junos	Version 15.1x49 d80
Juniper Junos	Version 15.1x49 d90
Juniper Junos	Version 17.3
Juniper Junos	Version 17.3 r1-s1
Juniper Junos	Version 17.3 r1-s4
Juniper Junos	Version 17.3 r1
Juniper Junos	Version 17.3 r2-s1
Juniper Junos	Version 17.3 r2-s2
Juniper Junos	Version 17.3 r2-s3
Juniper Junos	Version 17.3 r2-s4
Juniper Junos	Version 17.3 r2-s5
Juniper Junos	Version 17.3 r2
Juniper Junos	Version 17.3 r3-s1
Juniper Junos	Version 17.3 r3-s2
Juniper Junos	Version 17.3 r3-s3
Juniper Junos	Version 17.3 r3-s4
Juniper Junos	Version 17.3 r3-s5
Juniper Junos	Version 17.3 r3-s6
Juniper Junos	Version 17.3 r3
Juniper Junos	Version 17.3 r3
Juniper Junos	Version 17.4
Juniper Junos	Version 17.4 r1-s1
Juniper Junos	Version 17.4 r1-s2
Juniper Junos	Version 17.4 r1-s3
Juniper Junos	Version 17.4 r1-s4
Juniper Junos	Version 17.4 r1-s5
Juniper Junos	Version 17.4 r1-s6
Juniper Junos	Version 17.4 r1-s7
Juniper Junos	Version 17.4 r1
Juniper Junos	Version 17.4 r2-s10
Juniper Junos	Version 17.4 r2-s11
Juniper Junos	Version 17.4 r2-s12
Juniper Junos	Version 17.4 r2-s13
Juniper Junos	Version 17.4 r2-s1
Juniper Junos	Version 17.4 r2-s2
Juniper Junos	Version 17.4 r2-s3
Juniper Junos	Version 17.4 r2-s4
Juniper Junos	Version 17.4 r2-s5
Juniper Junos	Version 17.4 r2-s6
Juniper Junos	Version 17.4 r2-s7
Juniper Junos	Version 17.4 r2-s8
Juniper Junos	Version 17.4 r2-s9
Juniper Junos	Version 17.4 r2
Juniper Junos	Version 18.1
Juniper Junos	Version 18.1 r1
Juniper Junos	Version 18.1 r2-s1
Juniper Junos	Version 18.1 r2-s2
Juniper Junos	Version 18.1 r2-s4
Juniper Junos	Version 18.1 r2
Juniper Junos	Version 18.1 r3-s13
Juniper Junos	Version 18.1 r3-s1
Juniper Junos	Version 18.1 r3-s2
Juniper Junos	Version 18.1 r3-s3
Juniper Junos	Version 18.1 r3-s4
Juniper Junos	Version 18.1 r3-s5
Juniper Junos	Version 18.1 r3-s6
Juniper Junos	Version 18.1 r3-s7
Juniper Junos	Version 18.1 r3-s8
Juniper Junos	Version 18.1 r3
Juniper Junos	Version 18.2
Juniper Junos	Version 18.2 r1-s2
Juniper Junos	Version 18.2 r1-s3
Juniper Junos	Version 18.2 r1-s4
Juniper Junos	Version 18.2 r1-s5
Juniper Junos	Version 18.2 r1
Juniper Junos	Version 18.2 r2-s1
Juniper Junos	Version 18.2 r2-s2
Juniper Junos	Version 18.2 r2-s3
Juniper Junos	Version 18.2 r2-s4
Juniper Junos	Version 18.2 r2-s5
Juniper Junos	Version 18.2 r2-s6
Juniper Junos	Version 18.2 r2-s7
Juniper Junos	Version 18.2 r2-s8
Juniper Junos	Version 18.2 r2
Juniper Junos	Version 18.3
Juniper Junos	Version 18.3 r1-s1
Juniper Junos	Version 18.3 r1-s2
Juniper Junos	Version 18.3 r1-s3
Juniper Junos	Version 18.3 r1-s4
Juniper Junos	Version 18.3 r1-s5
Juniper Junos	Version 18.3 r1-s6
Juniper Junos	Version 18.3 r1
Juniper Junos	Version 18.4
Juniper Junos	Version 18.4 r1-s1
Juniper Junos	Version 18.4 r1-s2
Juniper Junos	Version 18.4 r1-s3
Juniper Junos	Version 18.4 r1-s4
Juniper Junos	Version 18.4 r1-s5
Juniper Junos	Version 18.4 r1

Running on/with	Platform Versions
Juniper Srx100	All versions
Juniper Srx110	All versions
Juniper Srx1400	All versions
Juniper Srx1500	All versions
Juniper Srx1600	All versions
Juniper Srx210	All versions
Juniper Srx220	All versions
Juniper Srx2300	All versions
Juniper Srx240	All versions
Juniper Srx240h2	All versions
Juniper Srx240m	All versions
Juniper Srx300	All versions
Juniper Srx320	All versions
Juniper Srx340	All versions
Juniper Srx3400	All versions
Juniper Srx345	All versions
Juniper Srx3600	All versions
Juniper Srx380	All versions
Juniper Srx4000	All versions
Juniper Srx4100	All versions
Juniper Srx4200	All versions
Juniper Srx4300	All versions
Juniper Srx4600	All versions
Juniper Srx4700	All versions
Juniper Srx5000	All versions
Juniper Srx5400	All versions
Juniper Srx550	All versions
Juniper Srx550 Hm	All versions
Juniper Srx550m	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions
Juniper Vsrx	All versions

References (58)

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html

Source: cve@mitre.org

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html

Source: cve@mitre.org

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html

Source: cve@mitre.org

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html

Source: cve@mitre.org

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html

Source: cve@mitre.org

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=146191105921542&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0562.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0601.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3511

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

Third Party Advisory

http://www.securitytracker.com/id/1035236

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2925-1

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821

Source: cve@mitre.org

Third Party Advisory

https://kb.isc.org/article/AA-01352

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01380

Source: cve@mitre.org

Broken LinkRelease Notes

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

Broken Link

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/201610-07

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html