CVE-2016-1284

MEDIUM

ISC BIND 9 Supported Preview Edition <9.9.8-S5 - DoS

Title source: llm

Description

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

Scores

CVSS v3 5.9
EPSS 0.0948
EPSS Percentile 92.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-20
Status draft

Affected Products (4)

isc/bind
isc/bind
isc/bind
isc/bind

Timeline

Published Feb 04, 2016
Tracked Since Feb 18, 2026