NVD

Id
17700  
Name
CVE-2016-1285  
Description
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-03-09  
Modified Date
2016-12-30  
Seq
2016-1285  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97486 17700 CVE-2016-1285 FEDORA-2016-364c0a9df4  View
97487 17700 CVE-2016-1285 FEDORA-2016-161b73fc2c  View
97488 17700 CVE-2016-1285 FEDORA-2016-b593e84223  View
97489 17700 CVE-2016-1285 FEDORA-2016-5047abe4a9  View
97490 17700 CVE-2016-1285 FEDORA-2016-75f31fbb0a  View
97491 17700 CVE-2016-1285 FEDORA-2016-dce6dbe6a8  View
97492 17700 CVE-2016-1285 SUSE-SU-2016:0759  View
97493 17700 CVE-2016-1285 SUSE-SU-2016:0780  View
97494 17700 CVE-2016-1285 SUSE-SU-2016:0825  View
97495 17700 CVE-2016-1285 openSUSE-SU-2016:0827  View
97496 17700 CVE-2016-1285 openSUSE-SU-2016:0830  View
97497 17700 CVE-2016-1285 openSUSE-SU-2016:0834  View
97498 17700 CVE-2016-1285 openSUSE-SU-2016:0859  View
97499 17700 CVE-2016-1285 SUSE-SU-2016:1541  View
97500 17700 CVE-2016-1285 SSRT110084  View
97501 17700 CVE-2016-1285 RHSA-2016:0562  View
97502 17700 CVE-2016-1285 RHSA-2016:0601  View
97503 17700 CVE-2016-1285 DSA-3511  View
97504 17700 CVE-2016-1285 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
97505 17700 CVE-2016-1285 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
97506 17700 CVE-2016-1285 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
97507 17700 CVE-2016-1285 1035236  View
97508 17700 CVE-2016-1285 USN-2925-1  View
97509 17700 CVE-2016-1285 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821  View
97510 17700 CVE-2016-1285 https://kb.isc.org/article/AA-01352  View
97511 17700 CVE-2016-1285 https://kb.isc.org/article/AA-01380  View
97512 17700 CVE-2016-1285 https://kb.isc.org/article/AA-01438  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1151 JVNDB-2016-001924 ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND の named は、alist.c および sexpr.c に関する不備があり、フェッチ応答メッセージを解析する際、DNAME レコードを適切に処理しないため、サービス運用妨害 (表明違反およびデーモンの停止) 状態にされる脆弱性が存在します。 CVE-2016-1285 87791 CVE-2016-1285 17700 4.3 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001924.html 2016-03-09 2016-11-14 View