Lucene search

[email protected]CVE-2016-1285

HistoryMar 09, 2016 - 11:59 p.m.

CVE-2016-1285

2016-03-0923:59:02

[email protected]

web.nvd.nist.gov

364

cve-2016-1285

isc bind

denial of service

assertion failure

daemon exit

malformed packet

rndc interface

alist.c

sexpr.c

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.176 Low

EPSS

Percentile

96.2%

JSON

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Affected configurations

NVD

Node

iscbindRange9.0.0–9.9.8

iscbindRange9.10.0–9.10.3

iscbindMatch9.9.8-

iscbindMatch9.9.8p2

iscbindMatch9.9.8p3

iscbindMatch9.9.8rc1

iscbindMatch9.10.3-

iscbindMatch9.10.3beta1

iscbindMatch9.10.3p1

iscbindMatch9.10.3p2

iscbindMatch9.10.3p3

iscbindMatch9.10.3rc1

Node

suselinux_enterprise_debuginfoMatch11sp2

suselinux_enterprise_debuginfoMatch11sp3

suselinux_enterprise_debuginfoMatch11sp4

susemanagerMatch2.1

susemanager_proxyMatch2.1

suseopenstack_cloudMatch5

opensuseleapMatch42.1

opensuseopensuseMatch11.4

opensuseopensuseMatch13.1

opensuseopensuseMatch13.2

suselinux_enterprise_desktopMatch11sp4

suselinux_enterprise_desktopMatch12-

suselinux_enterprise_desktopMatch12sp1

suselinux_enterprise_serverMatch11sp2ltss

suselinux_enterprise_serverMatch11sp3ltss

suselinux_enterprise_serverMatch11sp4

suselinux_enterprise_serverMatch12-

suselinux_enterprise_serverMatch12sp1

suselinux_enterprise_software_development_kitMatch11sp4

suselinux_enterprise_software_development_kitMatch12-

suselinux_enterprise_software_development_kitMatch12sp1

Node

fedoraprojectfedoraMatch22

fedoraprojectfedoraMatch23

fedoraprojectfedoraMatch24

Node

canonicalubuntu_linuxMatch12.04-

canonicalubuntu_linuxMatch14.04esm

canonicalubuntu_linuxMatch15.10

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

Node

juniperjunosMatch12.1x46-

juniperjunosMatch12.1x46d10

juniperjunosMatch12.1x46d15

juniperjunosMatch12.1x46d20

juniperjunosMatch12.1x46d25

juniperjunosMatch12.1x46d30

juniperjunosMatch12.1x46d35

juniperjunosMatch12.1x46d40

juniperjunosMatch12.1x46d45

juniperjunosMatch12.1x46d50

juniperjunosMatch12.1x46d55

juniperjunosMatch12.1x46d60

juniperjunosMatch12.1x46d65

juniperjunosMatch12.1x46d66

juniperjunosMatch12.1x46d67

juniperjunosMatch12.1x46d70

juniperjunosMatch12.1x46d71

juniperjunosMatch12.1x46d72

juniperjunosMatch12.1x46d73

juniperjunosMatch12.1x46d76

juniperjunosMatch12.1x46d77

juniperjunosMatch12.1x46-d10

juniperjunosMatch12.1x46-d76-

juniperjunosMatch12.3x48-

juniperjunosMatch12.3x48d10

juniperjunosMatch12.3x48d15

juniperjunosMatch12.3x48d20

juniperjunosMatch12.3x48d25

juniperjunosMatch12.3x48d30

juniperjunosMatch12.3x48d35

juniperjunosMatch12.3x48d40

juniperjunosMatch12.3x48d45

juniperjunosMatch12.3x48d50

juniperjunosMatch12.3x48d51

juniperjunosMatch12.3x48d55

juniperjunosMatch12.3x48d60

juniperjunosMatch12.3x48d65

juniperjunosMatch12.3x48d66

juniperjunosMatch12.3x48d70

juniperjunosMatch12.3x48d75

juniperjunosMatch15.1x49d10

juniperjunosMatch15.1x49d100

juniperjunosMatch15.1x49d110

juniperjunosMatch15.1x49d120

juniperjunosMatch15.1x49d130

juniperjunosMatch15.1x49d131

juniperjunosMatch15.1x49d140

juniperjunosMatch15.1x49d15

juniperjunosMatch15.1x49d150

juniperjunosMatch15.1x49d160

juniperjunosMatch15.1x49d170

juniperjunosMatch15.1x49d180

juniperjunosMatch15.1x49d20

juniperjunosMatch15.1x49d25

juniperjunosMatch15.1x49d30

juniperjunosMatch15.1x49d35

juniperjunosMatch15.1x49d40

juniperjunosMatch15.1x49d45

juniperjunosMatch15.1x49d50

juniperjunosMatch15.1x49d55

juniperjunosMatch15.1x49d60

juniperjunosMatch15.1x49d65

juniperjunosMatch15.1x49d70

juniperjunosMatch15.1x49d75

juniperjunosMatch15.1x49d80

juniperjunosMatch15.1x49d90

juniperjunosMatch17.3-

juniperjunosMatch17.3r1

juniperjunosMatch17.3r1-s1

juniperjunosMatch17.3r1-s4

juniperjunosMatch17.3r2

juniperjunosMatch17.3r2-s1

juniperjunosMatch17.3r2-s2

juniperjunosMatch17.3r2-s3

juniperjunosMatch17.3r2-s4

juniperjunosMatch17.3r2-s5

juniperjunosMatch17.3r3

juniperjunosMatch17.3r3-

juniperjunosMatch17.3r3-s1

juniperjunosMatch17.3r3-s2

juniperjunosMatch17.3r3-s3

juniperjunosMatch17.3r3-s4

juniperjunosMatch17.3r3-s5

juniperjunosMatch17.3r3-s6

juniperjunosMatch17.4-

juniperjunosMatch17.4r1

juniperjunosMatch17.4r1-s1

juniperjunosMatch17.4r1-s2

juniperjunosMatch17.4r1-s3

juniperjunosMatch17.4r1-s4

juniperjunosMatch17.4r1-s5

juniperjunosMatch17.4r1-s6

juniperjunosMatch17.4r1-s7

juniperjunosMatch17.4r2

juniperjunosMatch17.4r2-s1

juniperjunosMatch17.4r2-s10

juniperjunosMatch17.4r2-s11

juniperjunosMatch17.4r2-s12

juniperjunosMatch17.4r2-s13

juniperjunosMatch17.4r2-s2

juniperjunosMatch17.4r2-s3

juniperjunosMatch17.4r2-s4

juniperjunosMatch17.4r2-s5

juniperjunosMatch17.4r2-s6

juniperjunosMatch17.4r2-s7

juniperjunosMatch17.4r2-s8

juniperjunosMatch17.4r2-s9

juniperjunosMatch18.1-

juniperjunosMatch18.1r1

juniperjunosMatch18.1r2

juniperjunosMatch18.1r2-s1

juniperjunosMatch18.1r2-s2

juniperjunosMatch18.1r2-s4

juniperjunosMatch18.1r3

juniperjunosMatch18.1r3-s1

juniperjunosMatch18.1r3-s13

juniperjunosMatch18.1r3-s2

juniperjunosMatch18.1r3-s3

juniperjunosMatch18.1r3-s4

juniperjunosMatch18.1r3-s5

juniperjunosMatch18.1r3-s6

juniperjunosMatch18.1r3-s7

juniperjunosMatch18.1r3-s8

juniperjunosMatch18.2-

juniperjunosMatch18.2r1

juniperjunosMatch18.2r1-s2

juniperjunosMatch18.2r1-s3

juniperjunosMatch18.2r1-s4

juniperjunosMatch18.2r1-s5

juniperjunosMatch18.2r2

juniperjunosMatch18.2r2-s1

juniperjunosMatch18.2r2-s2

juniperjunosMatch18.2r2-s3

juniperjunosMatch18.2r2-s4

juniperjunosMatch18.2r2-s5

juniperjunosMatch18.2r2-s6

juniperjunosMatch18.2r2-s7

juniperjunosMatch18.2r2-s8

juniperjunosMatch18.3-

juniperjunosMatch18.3r1

juniperjunosMatch18.3r1-s1

juniperjunosMatch18.3r1-s2

juniperjunosMatch18.3r1-s3

juniperjunosMatch18.3r1-s4

juniperjunosMatch18.3r1-s5

juniperjunosMatch18.3r1-s6

juniperjunosMatch18.4-

juniperjunosMatch18.4r1

juniperjunosMatch18.4r1-s1

juniperjunosMatch18.4r1-s2

juniperjunosMatch18.4r1-s3

juniperjunosMatch18.4r1-s4

juniperjunosMatch18.4r1-s5

AND

junipervsrxMatch-

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx1500Match-

junipersrx1600Match-

junipersrx210Match-

junipersrx220Match-

junipersrx2300Match-

junipersrx240Match-

junipersrx240h2Match-

junipersrx240mMatch-

junipersrx300Match-

junipersrx320Match-

junipersrx340Match-

junipersrx3400Match-

junipersrx345Match-

junipersrx3600Match-

junipersrx380Match-

junipersrx4000Match-

junipersrx4100Match-

junipersrx4200Match-

junipersrx4300Match-

junipersrx4600Match-

junipersrx4700Match-

junipersrx5000Match-

junipersrx5400Match-

junipersrx550Match-

junipersrx550_hmMatch-

junipersrx550mMatch-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

CPENameOperatorVersion
isc:bindisc bindlt9.9.8
isc:bindisc bindlt9.10.3

CPE	Name	Operator	Version
isc:bind	isc bind	lt	9.9.8
isc:bind	isc bind	lt	9.10.3

References

lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html

lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html

lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html

lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html

lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html

lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html

lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html

marc.info/?l=bugtraq&m=146191105921542&w=2

rhn.redhat.com/errata/RHSA-2016-0562.html

rhn.redhat.com/errata/RHSA-2016-0601.html

www.debian.org/security/2016/dsa-3511

www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

www.securitytracker.com/id/1035236

www.ubuntu.com/usn/USN-2925-1

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821

kb.isc.org/article/AA-01352

kb.isc.org/article/AA-01380

kb.isc.org/article/AA-01438

security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc

security.gentoo.org/glsa/201610-07

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.176 Low

EPSS

Percentile

96.2%

JSON

CVE-2016-1285

Affected configurations

References

Related