What’s Vulnerable › Vulnerabilities

CVE-2016-1284

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-02-04 · updated 2026-06-17
• Weakness: CWE-20

Description

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

Affected products

• ISC BIND: 9.9.8-s1, 9.9.8-s2, 9.9.8-s3, 9.9.8-s4

References

• http://www.securitytracker.com/id/1034935
• https://kb.isc.org/article/AA-01348
• https://kb.isc.org/article/AA-01438
• http://www.securitytracker.com/id/1034935
• https://kb.isc.org/article/AA-01348
• https://kb.isc.org/article/AA-01438

Get alerted when CVE-2016-1284 or the next vulnerability affects your stack