Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2016-8864 EPSS 39%

  named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to …

  bind9 bind9 bind Debian Ubuntu Alpine
  Nov 2, 2016

Revision history

1. 2025-05-29 #24

   Neue Updates von Dell aufgenommen

2. 2018-09-26 #23

   Added references

3. 2017-06-28 #22

   New remediations available

4. 2017-04-12 #20

   New remediations available

5. 2017-04-12 #21

   Version nicht vorhanden

6. 2017-03-08 #17

   New remediations available

7. 2017-03-08 #18

   Version nicht vorhanden

8. 2017-03-08 #19

   New remediations available

9. 2017-02-26 #16

   New remediations available

10. 2017-02-06 #14

    New remediations available

11. 2017-02-06 #15

    Version nicht vorhanden

12. 2017-01-16 #13

    New remediations available

13. 2016-12-05 #12

    New remediations available

14. 2016-11-09 #11

    New remediations available

15. 2016-11-03 #10

    New remediations available

16. 2016-11-02 #4

    New remediations available

17. 2016-11-02 #5

    Version nicht vorhanden

18. 2016-11-02 #6

    New remediations available

19. 2016-11-02 #7

    Version nicht vorhanden

20. 2016-11-02 #8

    Version nicht vorhanden

21. 2016-11-02 #9

    Version nicht vorhanden

22. 2016-11-01 #1

    Initial Release

23. 2016-11-01 #2

    Version nicht vorhanden

24. 2016-11-01 #3

    Version nicht vorhanden

References

• ISC BIND Security Advisory AA-01434 vom 2016-11-01
  https://kb.isc.org/article/AA-01434/0/CVE-2016-8864
• FreeBSD Security Advisory FreeBSD-SA-16:34.bind vom 2016-11-02
  https://www.freebsd.org/security/advisories/FreeBSD-SA-16%3A34.bind.asc
• Ubuntu Security Notice USN-3119-1 vom 2016-11-01
  https://www.ubuntu.com/usn/usn-3119-1/
• Debian Security Advisory DSA-3703-1 vom 2016-11-01
  https://lists.debian.org/debian-security-announce/2016/msg00286.html
• SC BIND Security Advisory AA-01434 vom 2016-11-01
  https://kb.isc.org/article/AA-01434/0/CVE-2016-8864%3A-A-problem-handling-responses-containing-a-DNAME-answer-can-lead-to-an-assertion-failure.html
• SUSE Security Update SUSE-SU-2016:2696-1 vom 2016-11-02
  https://www.suse.com/support/update/announcement/2016/suse-su-20162696-1.html
• SUSE Security Update SUSE-SU-2016:2697-1 vom 2016-11-02
  https://www.suse.com/support/update/announcement/2016/suse-su-20162697-1.html
• Red Hat Security Advisory RHSA-2016:2142-1 vom 2016-11-02
  http://rhn.redhat.com/errata/RHSA-2016-2142.html
• Red Hat Security Advisory RHSA-2016:2141-1 vom 2016-11-02
  http://rhn.redhat.com/errata/RHSA-2016-2141.html
• Oracle Linux Security Advisory ELSA-2016-2141 vom 2016-11-02
  http://linux.oracle.com/errata/ELSA-2016-2141.html
• Oracle Linux Security Advisory ELSA-2016-2142 vom 2016-11-03
  http://linux.oracle.com/errata/ELSA-2016-2142.html
• SUSE Security Update SUSE-SU-2016:2706-1 vom 2016-11-03
  https://www.suse.com/support/update/announcement/2016/suse-su-20162706-1.html
• CentOS-announce CESA-2016:2141 vom 2016-11-02
  https://lists.centos.org/pipermail/centos-announce/2016-November/022136.html
• CentOS-announce CESA-2016:2142 vom 2016-11-02
  https://lists.centos.org/pipermail/centos-announce/2016-November/022138.html
• Red Hat Security Advisory RHSA-2016:2615-1 vom 2016-11-03
  https://rhn.redhat.com/errata/RHSA-2016-2615.html
• Oracle Linux Security Advisory ELSA-2016-2615 vom 2016-11-09
  http://linux.oracle.com/errata/ELSA-2016-2615.html
• Red Hat Security Advisory RHSA-2016:2871 vom 2016-12-06
  https://access.redhat.com/errata/RHSA-2016:2871
• Oracle Linux Security Advisory ELSA-2017-0062 vom 2017-01-17
  http://linux.oracle.com/errata/ELSA-2017-0062.html
• Oracle Linux Security Advisory ELSA-2017-0063 vom 2017-01-17
  http://linux.oracle.com/errata/ELSA-2017-0063.html
• HPE SECURITY BULLETIN HPESBUX03699 SSRT110304 rev.1 vom 2017-01-27
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05381687
• Debian Security Advisory DSA-3795 vom 2017-02-26
  https://www.debian.org/security/2017/dsa-3795
• Xerox Security Bulletin XRX17-006 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf
• Xerox Security Bulletin XRX17-005 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf
• Juniper Security Bulletin JSA10785 vom 2017-04-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10785
• Red Hat Security Advisory RHSA-2017:1583 vom 2017-06-28
  https://access.redhat.com/errata/RHSA-2017:1583
• Oracle Linux Security Advisory ELSA-2022-9117 vom 2022-02-03
  https://linux.oracle.com/errata/ELSA-2022-9117.html
• Dell Security Advisory DSA-2025-213 vom 2025-05-30
  https://www.dell.com/support/kbdoc/de-de/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities