CVE-2016-1286

—

CVSS 3.1

8.6 high

EPSS

62%p99

Published

Mar 9, 2016 (Mar 9, 2016)

Modified

Jun 17, 2026

Description

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

Vendors: isc suse opensuse fedoraproject canonical debian juniper
Products: bind, linux enterprise debuginfo, manager, manager proxy, openstack cloud, leap, opensuse, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, fedora, ubuntu linux
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (62.1%)

In the news0 stories

No ingested article mentions this CVE yet.