CVE-2016-1284

MEDIUM 5.9CVE-2016-1284 · Published 04/02/2016 · updated 17/06/2026

In short

CVE-2016-1284 is a MEDIUM (CVSS 5.9) vulnerability affecting bind (isc).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bind isc	`= 9.9.8`	No fix yet

Description

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

References

securitytracker.com/id/1034935
kb.isc.org/article/AA-01348 · Vendor Advisory
kb.isc.org/article/AA-01438 · Release Notes

More vulnerabilities in bind

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

= 9.9.8

No fix yet

More vulnerabilities in bind

See all →