CVE-2016-2848
HighSummary
ISC BIND versions 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allow remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of the DNS server, potentially leading to service outages.
Recommendation
It is recommended to upgrade to the latest version of ISC BIND to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in ISC BIND
See all- CVE-2016-9444High
In ISC BIND 9.x before version 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2, a vulnerability allows remote attackers to cause a denial of service via a crafted DS resource record in an answer.
- CVE-2016-9147High
ISC BIND versions 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 contain a vulnerability that allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among DNSSEC-related RRsets.
- CVE-2016-9131High
ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 has a vulnerability that allows remote attackers to cause a denial of service via a malformed response to an RTYPE ANY query.
- CVE-2016-8864High
A vulnerability in ISC BIND 9.x before version 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service via a DNAME record in the answer section of a response to a recursive query.
- CVE-2016-2776High
In buffer.c in ISC BIND 9 before version 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3, responses are not properly constructed, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- CVE-2016-1286High
A vulnerability in ISC BIND 9.x before version 9.9.8-P4 and 9.10.x before version 9.10.3-P4 allows remote attackers to cause a denial of service via a crafted signature record for a DNAME record.
- CVE-2015-8705High
In buffer.c in ISC BIND 9.10.x before version 9.10.3-P3, when debug logging is enabled, remote attackers can cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via OPT data or an ECS option.
- CVE-2015-8461High
A race condition in resolver.c in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
- CVE-2015-5986High
In ISC BIND versions 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
- CVE-2015-5722High
In ISC BIND 9.x before version 9.9.7-P3 and 9.10.x before version 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Original NVD description (English source)
ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.