NVD

Id
22224  
Name
CVE-2016-8864  
Description
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-11-02  
Modified Date
2017-01-17  
Seq
2016-8864  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118378 22224 CVE-2016-8864 RHSA-2016:2615  View
118379 22224 CVE-2016-8864 RHSA-2016:2871  View
118380 22224 CVE-2016-8864 DSA-3703  View
118381 22224 CVE-2016-8864 94067  View
118382 22224 CVE-2016-8864 https://kb.isc.org/article/AA-01434  View
118383 22224 CVE-2016-8864 https://kb.isc.org/article/AA-01435  View
118384 22224 CVE-2016-8864 https://kb.isc.org/article/AA-01436  View
118385 22224 CVE-2016-8864 https://kb.isc.org/article/AA-01437  View
118386 22224 CVE-2016-8864 https://kb.isc.org/article/AA-01438  View
118387 22224 CVE-2016-8864 GLSA-201701-26  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4901 JVNDB-2016-005674 ISC BIND の DNAME レコードを含む応答パケットの処理に脆弱性 ISC BIND には、DNAME レコードを含む応答パケットの処理に問題があり、db.c もしくは resolver.c で assertion failture (表明違反) が発生し、その結果 named が異常終了する可能性があります。 CVE-2016-8864 95371 CVE-2016-8864 22224 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005674.html 2016-11-02 2016-11-10 View