CVE-2016-1284

MEDIUM

ISC BIND 9 Supported Preview Edition <9.9.8-S5 - DoS

Title source: llm

Description

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

References (3)

Core 3

Core References

Release Notes x_refsource_confirm

https://kb.isc.org/article/AA-01438

Vendor Advisory x_refsource_confirm

https://kb.isc.org/article/AA-01348

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034935

Scores

CVSS v3 5.9

EPSS 0.0948

EPSS Percentile 92.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (1)

isc/bind 9.9.8 s1 (4 CPE variants)

Published Feb 04, 2016

Tracked Since Feb 18, 2026