Vulnerability CVE-2016-1284
Published: 2016-02-04

Description:
rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.

CVSS2 => (AV:N/AC:H/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.6/10
2.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
ISC -> BIND 

 References:
http://www.securitytracker.com/id/1034935
https://kb.isc.org/article/AA-01348
https://kb.isc.org/article/AA-01438
Copyright 2024, cxsecurity.com

 

Back to Top