CVE-2016-8864
HighSummary
A vulnerability in ISC BIND 9.x before version 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service via a DNAME record in the answer section of a response to a recursive query.
Risk Assessment
Attackers can cause the BIND daemon to crash, leading to a disruption in DNS service availability for the organization.
Recommendation
It is recommended to update BIND to the latest version to eliminate this vulnerability and secure the system against potential attacks.
Other vulnerabilities in ISC BIND
See all- CVE-2016-9444High
In ISC BIND 9.x before version 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2, a vulnerability allows remote attackers to cause a denial of service via a crafted DS resource record in an answer.
- CVE-2016-9147High
ISC BIND versions 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 contain a vulnerability that allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among DNSSEC-related RRsets.
- CVE-2016-9131High
ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 has a vulnerability that allows remote attackers to cause a denial of service via a malformed response to an RTYPE ANY query.
- CVE-2016-2848High
ISC BIND versions 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allow remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
- CVE-2016-2776High
In buffer.c in ISC BIND 9 before version 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3, responses are not properly constructed, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- CVE-2016-1286High
A vulnerability in ISC BIND 9.x before version 9.9.8-P4 and 9.10.x before version 9.10.3-P4 allows remote attackers to cause a denial of service via a crafted signature record for a DNAME record.
- CVE-2015-8705High
In buffer.c in ISC BIND 9.10.x before version 9.10.3-P3, when debug logging is enabled, remote attackers can cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via OPT data or an ECS option.
- CVE-2015-8461High
A race condition in resolver.c in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
- CVE-2015-5986High
In ISC BIND versions 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
- CVE-2015-5722High
In ISC BIND 9.x before version 9.9.7-P3 and 9.10.x before version 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Original NVD description (English source)
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.