Summary
Tony Finch and Marco Davids discovered that Bind incorrectly handled
certain responses containing a DNAME answer. A remote attacker could
possibly use this issue to cause Bind to crash, resulting in a denial of
service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | bind9 | 1:9.10.3.dfsg.P4-8ubuntu1.2 |
Vulnerabilities 1
-
Unscored —CVE-2016-8864 EPSS 39%
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to …
References
-
report
https://ubuntu.com/security/CVE-2016-8864