Lucene search

K
cvelistMitreCVELIST:CVE-2016-1285
HistoryMar 09, 2016 - 11:00 p.m.

CVE-2016-1285

2016-03-0923:00:00
mitre
www.cve.org
1

7.4 High

AI Score

Confidence

High

0.176 Low

EPSS

Percentile

96.2%

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

References