What’s Vulnerable › Vulnerabilities

CVE-2016-1285

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 57.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-03-09 · updated 2026-06-17

Description

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 15.10
• Debian Linux: 7.0, 8.0, 9.0
• Fedoraproject Fedora: 22, 23, 24
• ISC BIND: from 9.0.0 before 9.9.8; from 9.10.0 before 9.10.3; 9.9.8, 9.9.8-p2, 9.9.8-p3, 9.9.8-rc1, 9.10.3, 9.10.3-beta1 (+4) — fixed in 9.10.3, 9.9.8
• Juniper Junos OS: 12.1x46, 12.1x46-d10, 12.1x46-d15, 12.1x46-d20, 12.1x46-d25, 12.1x46-d30 (+144)
• openSUSE Leap: 42.1
• Opensuse: 11.4, 13.1, 13.2
• SUSE Linux Enterprise Debuginfo: 11-sp2, 11-sp3, 11-sp4
• SUSE Linux Enterprise Server 15 SP1: 11-sp4, 12, 12-sp1
• SUSE Linux Enterprise Server: 11-sp2, 11-sp3, 11-sp4, 12, 12-sp1
• SUSE Linux Enterprise Software Development Kit: 11-sp4, 12, 12-sp1
• SUSE Manager: 2.1
• SUSE Manager Proxy: 2.1
• SUSE Openstack Cloud: 5

How to fix

Upgrade to a fixed version: ISC BIND 9.10.3, 9.9.8. Check the vendor advisory for mitigations.

References

• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html

Get alerted when CVE-2016-1285 or the next vulnerability affects your stack