CVE-2016-1285: Input Validation

Published Mar 9, 2016
·
Updated

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Affected Software

555 affected components
Novell Suse Manager=2.1
Novell Suse Manager Proxy=2.1
Novell Suse Openstack Cloud=5
ISC BIND=9.0
ISC BIND=9.0.0-rc1
ISC BIND=9.0.0-rc2
ISC BIND=9.0.0-rc3
ISC BIND=9.0.0-rc4
ISC BIND=9.0.0-rc5
ISC BIND=9.0.0-rc6
ISC BIND=9.0.1
ISC BIND=9.0.1-rc1
ISC BIND=9.0.1-rc2
ISC BIND=9.1
ISC BIND=9.1.0-rc1
ISC BIND=9.1.1
ISC BIND=9.1.1-rc1
ISC BIND=9.1.1-rc2
ISC BIND=9.1.1-rc3
ISC BIND=9.1.1-rc4
ISC BIND=9.1.1-rc5
ISC BIND=9.1.1-rc6
ISC BIND=9.1.1-rc7
ISC BIND=9.1.2
ISC BIND=9.1.2-rc1
ISC BIND=9.1.3
ISC BIND=9.1.3-rc1
ISC BIND=9.1.3-rc2
ISC BIND=9.1.3-rc3
ISC BIND=9.2
ISC BIND=9.2.0
ISC BIND=9.2.0-a1
ISC BIND=9.2.0-a2
ISC BIND=9.2.0-a3
ISC BIND=9.2.0-b1
ISC BIND=9.2.0-b2
ISC BIND=9.2.0-rc1
ISC BIND=9.2.0-rc10
ISC BIND=9.2.0-rc2
ISC BIND=9.2.0-rc3
ISC BIND=9.2.0-rc4
ISC BIND=9.2.0-rc5
ISC BIND=9.2.0-rc6
ISC BIND=9.2.0-rc7
ISC BIND=9.2.0-rc8
ISC BIND=9.2.0-rc9
ISC BIND=9.2.1
ISC BIND=9.2.1-rc1
ISC BIND=9.2.1-rc2
ISC BIND=9.2.2
ISC BIND=9.2.2-p2
ISC BIND=9.2.2-p3
ISC BIND=9.2.2-rc1
ISC BIND=9.2.3
ISC BIND=9.2.3-rc1
ISC BIND=9.2.3-rc2
ISC BIND=9.2.3-rc3
ISC BIND=9.2.3-rc4
ISC BIND=9.2.4
ISC BIND=9.2.4-rc2
ISC BIND=9.2.4-rc3
ISC BIND=9.2.4-rc4
ISC BIND=9.2.4-rc5
ISC BIND=9.2.4-rc6
ISC BIND=9.2.4-rc7
ISC BIND=9.2.4-rc8
ISC BIND=9.2.5
ISC BIND=9.2.5-b2
ISC BIND=9.2.5-rc1
ISC BIND=9.2.6
ISC BIND=9.2.6-rc1
ISC BIND=9.2.7
ISC BIND=9.2.7-rc1
ISC BIND=9.2.7-rc2
ISC BIND=9.2.7-rc3
ISC BIND=9.2.8
ISC BIND=9.2.9
ISC BIND=9.2.9-rc1
ISC BIND=9.3
ISC BIND=9.3.0
ISC BIND=9.3.0-b2
ISC BIND=9.3.0-b3
ISC BIND=9.3.0-b4
ISC BIND=9.3.0-rc1
ISC BIND=9.3.0-rc2
ISC BIND=9.3.0-rc3
ISC BIND=9.3.0-rc4
ISC BIND=9.3.1
ISC BIND=9.3.1-b2
ISC BIND=9.3.1-rc1
ISC BIND=9.3.2
ISC BIND=9.3.2-rc1
ISC BIND=9.3.3
ISC BIND=9.3.3-rc1
ISC BIND=9.3.3-rc2
ISC BIND=9.3.3-rc3
ISC BIND=9.3.4
ISC BIND=9.3.5
ISC BIND=9.3.5-rc1
ISC BIND=9.3.5-rc2
ISC BIND=9.3.6
ISC BIND=9.3.6-rc1
ISC BIND=9.4
ISC BIND=9.4.0
ISC BIND=9.4.0-a1
ISC BIND=9.4.0-a2
ISC BIND=9.4.0-a3
ISC BIND=9.4.0-a4
ISC BIND=9.4.0-a5
ISC BIND=9.4.0-a6
ISC BIND=9.4.0-b1
ISC BIND=9.4.0-b2
ISC BIND=9.4.0-b3
ISC BIND=9.4.0-b4
ISC BIND=9.4.0-rc1
ISC BIND=9.4.0-rc2
ISC BIND=9.4.1
ISC BIND=9.4.2
ISC BIND=9.4.2-rc1
ISC BIND=9.4.2-rc2
ISC BIND=9.4.3
ISC BIND=9.4.3-b1
ISC BIND=9.4.3-b2
ISC BIND=9.4.3-b3
ISC BIND=9.4.3-p2
ISC BIND=9.4.3-rc1
ISC BIND=9.5
ISC BIND=9.5.0
ISC BIND=9.5.0-a1
ISC BIND=9.5.0-a2
ISC BIND=9.5.0-a3
ISC BIND=9.5.0-a4
ISC BIND=9.5.0-a5
ISC BIND=9.5.0-a6
ISC BIND=9.5.0-a7
ISC BIND=9.5.0-b1
ISC BIND=9.5.0-b2
ISC BIND=9.5.0-b3
ISC BIND=9.5.0-p1
ISC BIND=9.5.0-p2
ISC BIND=9.5.0-p2_w1
ISC BIND=9.5.0-p2_w2
ISC BIND=9.5.0-rc1
ISC BIND=9.5.1
ISC BIND=9.5.1-b1
ISC BIND=9.5.1-b2
ISC BIND=9.5.1-b3
ISC BIND=9.5.1-rc1
ISC BIND=9.5.1-rc2
ISC BIND=9.5.2
ISC BIND=9.5.2-b1
ISC BIND=9.5.2-p1
ISC BIND=9.5.2-p2
ISC BIND=9.5.2-p3
ISC BIND=9.5.2-p4
ISC BIND=9.5.2-rc1
ISC BIND=9.5.3-b1
ISC BIND=9.5.3-rc1
ISC BIND=9.6
ISC BIND=9.6-r1
ISC BIND=9.6-r2
ISC BIND=9.6-r3
ISC BIND=9.6-r4
ISC BIND=9.6-r4_p1
ISC BIND=9.6-r5
ISC BIND=9.6-r5_b1
ISC BIND=9.6-r5_p1
ISC BIND=9.6-r6
ISC BIND=9.6-r6_b1
ISC BIND=9.6-r6_rc1
ISC BIND=9.6-r6_rc2
ISC BIND=9.6-r7
ISC BIND=9.6-r7_p1
ISC BIND=9.6-r7_p2
ISC BIND=9.6-r9
ISC BIND=9.6-r9_p1
ISC BIND=9.6.0
ISC BIND=9.6.0-a1
ISC BIND=9.6.0-b1
ISC BIND=9.6.0-p1
ISC BIND=9.6.0-rc1
ISC BIND=9.6.0-rc2
ISC BIND=9.6.1
ISC BIND=9.6.1-b1
ISC BIND=9.6.1-p1
ISC BIND=9.6.1-p2
ISC BIND=9.6.1-p3
ISC BIND=9.6.1-rc1
ISC BIND=9.6.2
ISC BIND=9.6.2-b1
ISC BIND=9.6.2-p1
ISC BIND=9.6.2-p2
ISC BIND=9.6.2-p3
ISC BIND=9.6.2-rc1
ISC BIND=9.6.3
ISC BIND=9.6.3-b1
ISC BIND=9.6.3-rc1
ISC BIND=9.7.0
ISC BIND=9.7.0-a1
ISC BIND=9.7.0-a2
ISC BIND=9.7.0-a3
ISC BIND=9.7.0-b1
ISC BIND=9.7.0-b2
ISC BIND=9.7.0-b3
ISC BIND=9.7.0-p1
ISC BIND=9.7.0-p2
ISC BIND=9.7.0-rc1
ISC BIND=9.7.0-rc2
ISC BIND=9.7.1
ISC BIND=9.7.1-b1
ISC BIND=9.7.1-p1
ISC BIND=9.7.1-p2
ISC BIND=9.7.1-rc1
ISC BIND=9.7.2
ISC BIND=9.7.2-p1
ISC BIND=9.7.2-p2
ISC BIND=9.7.2-p3
ISC BIND=9.7.2-rc1
ISC BIND=9.7.3
ISC BIND=9.7.3-b1
ISC BIND=9.7.3-p1
ISC BIND=9.7.3-rc1
ISC BIND=9.7.4
ISC BIND=9.7.4-b1
ISC BIND=9.7.4-p1
ISC BIND=9.7.4-rc1
ISC BIND=9.7.5
ISC BIND=9.7.5-b1
ISC BIND=9.7.5-rc1
ISC BIND=9.7.5-rc2
ISC BIND=9.7.6
ISC BIND=9.7.6-p1
ISC BIND=9.7.6-p2
ISC BIND=9.7.6-p3
ISC BIND=9.7.6-p4
ISC BIND=9.7.7
ISC BIND=9.8.0
ISC BIND=9.8.0-a1
ISC BIND=9.8.0-b1
ISC BIND=9.8.0-p1
ISC BIND=9.8.0-p2
ISC BIND=9.8.0-p4
ISC BIND=9.8.0-rc1
ISC BIND=9.8.1
ISC BIND=9.8.1-b1
ISC BIND=9.8.1-b2
ISC BIND=9.8.1-b3
ISC BIND=9.8.1-p1
ISC BIND=9.8.1-rc1
ISC BIND=9.8.2
ISC BIND=9.8.2-b1
ISC BIND=9.8.2-rc1
ISC BIND=9.8.2-rc2
ISC BIND=9.8.3
ISC BIND=9.8.3-p1
ISC BIND=9.8.3-p2
ISC BIND=9.8.3-p3
ISC BIND=9.8.3-p4
ISC BIND=9.8.4
ISC BIND=9.8.5
ISC BIND=9.8.5-b1
ISC BIND=9.8.5-b2
ISC BIND=9.8.5-p1
ISC BIND=9.8.5-p2
ISC BIND=9.8.5-rc1
ISC BIND=9.8.5-rc2
ISC BIND=9.8.6-b1
ISC BIND=9.8.6-rc1
ISC BIND=9.8.6-rc2
ISC BIND=9.9.0
ISC BIND=9.9.0-a1
ISC BIND=9.9.0-a2
ISC BIND=9.9.0-a3
ISC BIND=9.9.0-b1
ISC BIND=9.9.0-b2
ISC BIND=9.9.0-rc1
ISC BIND=9.9.0-rc2
ISC BIND=9.9.0-rc3
ISC BIND=9.9.0-rc4
ISC BIND=9.9.1
ISC BIND=9.9.1-p1
ISC BIND=9.9.1-p2
ISC BIND=9.9.1-p3
ISC BIND=9.9.1-p4
ISC BIND=9.9.2
ISC BIND=9.9.3
ISC BIND=9.9.3-b1
ISC BIND=9.9.3-b2
ISC BIND=9.9.3-p1
ISC BIND=9.9.3-p2
ISC BIND=9.9.3-rc1
ISC BIND=9.9.3-rc2
ISC BIND=9.9.4-b1
ISC BIND=9.9.5
ISC BIND=9.9.6
ISC BIND=9.9.6-p1
ISC BIND=9.9.7-b1
ISC BIND=9.9.7-p1
ISC BIND=9.9.7-rc1
ISC BIND=9.9.7-rc2
ISC BIND=9.9.8
ISC BIND=9.9.8-p2
ISC BIND=9.9.8-p3
ISC BIND=9.9.8-rc1
ISC BIND=9.10.0
ISC BIND=9.10.0-a1
ISC BIND=9.10.0-a2
ISC BIND=9.10.0-b1
ISC BIND=9.10.0-b2
ISC BIND=9.10.0-p1
ISC BIND=9.10.0-p2
ISC BIND=9.10.0-rc1
ISC BIND=9.10.0-rc2
ISC BIND=9.10.1
ISC BIND=9.10.1-b1
ISC BIND=9.10.1-b2
ISC BIND=9.10.1-p1
ISC BIND=9.10.1-p2
ISC BIND=9.10.1-rc1
ISC BIND=9.10.1-rc2
ISC BIND=9.10.2
ISC BIND=9.10.2-b1
ISC BIND=9.10.2-p1
ISC BIND=9.10.2-p2
ISC BIND=9.10.2-p3
ISC BIND=9.10.2-p4
ISC BIND=9.10.2-rc1
ISC BIND=9.10.2-rc2
ISC BIND=9.10.3
ISC BIND=9.10.3-b1
ISC BIND=9.10.3-p2
ISC BIND=9.10.3-p3
ISC BIND=9.10.3-rc1
ISC BIND>=9.0.0<9.9.8
ISC BIND>=9.10.0<9.10.3
ISC BIND=9.9.8
ISC BIND=9.10.3
ISC BIND=9.10.3-beta1
ISC BIND=9.10.3-p1
SUSE Linux Enterprise Debuginfo=11-sp2
SUSE Linux Enterprise Debuginfo=11-sp3
SUSE Linux Enterprise Debuginfo=11-sp4
SUSE Manager=2.1
SUSE Manager Proxy=2.1
SUSE Openstack Cloud=5
openSUSE Leap=42.1
openSUSE openSUSE=11.4
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
SUSE Linux Enterprise Desktop=11-sp4
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Desktop=12-sp1
SUSE Linux Enterprise Server=11-sp2
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Server=12-sp1
SUSE Linux Enterprise Software Development Kit=11-sp4
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Software Development Kit=12-sp1
Fedoraproject Fedora=22
Fedoraproject Fedora=23
Fedoraproject Fedora=24
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
All of the following
Any of the following
Juniper Junos=12.1x46
Juniper Junos=12.1x46-d10
Juniper Junos=12.1x46-d15
Juniper Junos=12.1x46-d20
Juniper Junos=12.1x46-d25
Juniper Junos=12.1x46-d30
Juniper Junos=12.1x46-d35
Juniper Junos=12.1x46-d40
Juniper Junos=12.1x46-d45
Juniper Junos=12.1x46-d50
Juniper Junos=12.1x46-d55
Juniper Junos=12.1x46-d60
Juniper Junos=12.1x46-d65
Juniper Junos=12.1x46-d66
Juniper Junos=12.1x46-d67
Juniper Junos=12.1x46-d70
Juniper Junos=12.1x46-d71
Juniper Junos=12.1x46-d72
Juniper Junos=12.1x46-d73
Juniper Junos=12.1x46-d76
Juniper Junos=12.1x46-d77
Juniper Junos=12.1x46-d10
Juniper Junos=12.1x46-d76
Juniper Junos=12.3x48
Juniper Junos=12.3x48-d10
Juniper Junos=12.3x48-d15
Juniper Junos=12.3x48-d20
Juniper Junos=12.3x48-d25
Juniper Junos=12.3x48-d30
Juniper Junos=12.3x48-d35
Juniper Junos=12.3x48-d40
Juniper Junos=12.3x48-d45
Juniper Junos=12.3x48-d50
Juniper Junos=12.3x48-d51
Juniper Junos=12.3x48-d55
Juniper Junos=12.3x48-d60
Juniper Junos=12.3x48-d65
Juniper Junos=12.3x48-d66
Juniper Junos=12.3x48-d70
Juniper Junos=12.3x48-d75
Juniper Junos=15.1x49-d10
Juniper Junos=15.1x49-d100
Juniper Junos=15.1x49-d110
Juniper Junos=15.1x49-d120
Juniper Junos=15.1x49-d130
Juniper Junos=15.1x49-d131
Juniper Junos=15.1x49-d140
Juniper Junos=15.1x49-d15
Juniper Junos=15.1x49-d150
Juniper Junos=15.1x49-d160
Juniper Junos=15.1x49-d170
Juniper Junos=15.1x49-d180
Juniper Junos=15.1x49-d20
Juniper Junos=15.1x49-d25
Juniper Junos=15.1x49-d30
Juniper Junos=15.1x49-d35
Juniper Junos=15.1x49-d40
Juniper Junos=15.1x49-d45
Juniper Junos=15.1x49-d50
Juniper Junos=15.1x49-d55
Juniper Junos=15.1x49-d60
Juniper Junos=15.1x49-d65
Juniper Junos=15.1x49-d70
Juniper Junos=15.1x49-d75
Juniper Junos=15.1x49-d80
Juniper Junos=15.1x49-d90
Juniper Junos=17.3
Juniper Junos=17.3-r1
Juniper Junos=17.3-r1-s1
Juniper Junos=17.3-r1-s4
Juniper Junos=17.3-r2
Juniper Junos=17.3-r2-s1
Juniper Junos=17.3-r2-s2
Juniper Junos=17.3-r2-s3
Juniper Junos=17.3-r2-s4
Juniper Junos=17.3-r2-s5
Juniper Junos=17.3-r3
Juniper Junos=17.3-r3
Juniper Junos=17.3-r3-s1
Juniper Junos=17.3-r3-s2
Juniper Junos=17.3-r3-s3
Juniper Junos=17.3-r3-s4
Juniper Junos=17.3-r3-s5
Juniper Junos=17.3-r3-s6
Juniper Junos=17.4
Juniper Junos=17.4-r1
Juniper Junos=17.4-r1-s1
Juniper Junos=17.4-r1-s2
Juniper Junos=17.4-r1-s3
Juniper Junos=17.4-r1-s4
Juniper Junos=17.4-r1-s5
Juniper Junos=17.4-r1-s6
Juniper Junos=17.4-r1-s7
Juniper Junos=17.4-r2
Juniper Junos=17.4-r2-s1
Juniper Junos=17.4-r2-s10
Juniper Junos=17.4-r2-s11
Juniper Junos=17.4-r2-s12
Juniper Junos=17.4-r2-s13
Juniper Junos=17.4-r2-s2
Juniper Junos=17.4-r2-s3
Juniper Junos=17.4-r2-s4
Juniper Junos=17.4-r2-s5
Juniper Junos=17.4-r2-s6
Juniper Junos=17.4-r2-s7
Juniper Junos=17.4-r2-s8
Juniper Junos=17.4-r2-s9
Juniper Junos=18.1
Juniper Junos=18.1-r1
Juniper Junos=18.1-r2
Juniper Junos=18.1-r2-s1
Juniper Junos=18.1-r2-s2
Juniper Junos=18.1-r2-s4
Juniper Junos=18.1-r3
Juniper Junos=18.1-r3-s1
Juniper Junos=18.1-r3-s13
Juniper Junos=18.1-r3-s2
Juniper Junos=18.1-r3-s3
Juniper Junos=18.1-r3-s4
Juniper Junos=18.1-r3-s5
Juniper Junos=18.1-r3-s6
Juniper Junos=18.1-r3-s7
Juniper Junos=18.1-r3-s8
Juniper Junos=18.2
Juniper Junos=18.2-r1
Juniper Junos=18.2-r1-s2
Juniper Junos=18.2-r1-s3
Juniper Junos=18.2-r1-s4
Juniper Junos=18.2-r1-s5
Juniper Junos=18.2-r2
Juniper Junos=18.2-r2-s1
Juniper Junos=18.2-r2-s2
Juniper Junos=18.2-r2-s3
Juniper Junos=18.2-r2-s4
Juniper Junos=18.2-r2-s5
Juniper Junos=18.2-r2-s6
Juniper Junos=18.2-r2-s7
Juniper Junos=18.2-r2-s8
Juniper Junos=18.3
Juniper Junos=18.3-r1
Juniper Junos=18.3-r1-s1
Juniper Junos=18.3-r1-s2
Juniper Junos=18.3-r1-s3
Juniper Junos=18.3-r1-s4
Juniper Junos=18.3-r1-s5
Juniper Junos=18.3-r1-s6
Juniper Junos=18.4
Juniper Junos=18.4-r1
Juniper Junos=18.4-r1-s1
Juniper Junos=18.4-r1-s2
Juniper Junos=18.4-r1-s3
Juniper Junos=18.4-r1-s4
Juniper Junos=18.4-r1-s5
Any of the following
Juniper vSRX
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX1500
Juniper SRX1600
Juniper SRX210
Juniper SRX220
Juniper SRX2300
Juniper SRX240
Juniper Srx240h2
Juniper SRX240m
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX3400
Juniper SRX345
Juniper SRX3600
Juniper Srx380
Juniper SRX4000
Juniper SRX4100
Juniper SRX4200
Juniper SRX4300
Juniper SRX4600
Juniper SRX4700
Juniper SRX5000
Juniper SRX5400
Juniper SRX550
Juniper Srx550 Hm
Juniper SRX550m
Juniper SRX5600
Juniper SRX5800
Juniper SRX650

Event History

Mar 9, 2016
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2016-1285?

CVE-2016-1285 has a CVSS score of 7.5, indicating it is considered a high severity vulnerability.

2

How do I fix CVE-2016-1285?

To fix CVE-2016-1285, upgrade to ISC BIND version 9.9.8-P4, 9.10.3-P4 or later.

3

What is the impact of CVE-2016-1285?

CVE-2016-1285 allows an attacker to cause a denial of service by sending a malformed packet to the affected BIND 9.x server.

4

Which versions of BIND are affected by CVE-2016-1285?

CVE-2016-1285 affects ISC BIND 9.x versions prior to 9.9.8-P4 and 9.10.x before 9.10.3-P4.

5

Is CVE-2016-1285 exploitable remotely?

Yes, CVE-2016-1285 is remotely exploitable by sending malformed packets to the control channel of the affected BIND servers.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203