named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before…
Priority MEDIUM 60CWE-617Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 39 fixed, 1 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-617.
Summary
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
Why it matters now
EPSS 0.38733 98th percentileScored 2026-11-07
Fix Partial Red Hat: 5 advisoriesRed Hat: 39 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* | 9.0.0 to before 9.9.9; 9.10.0 to before 9.10.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:* | 9.9.9 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:beta1:*:*:*:*:*:* | 9.9.9 beta1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:beta2:*:*:*:*:*:* | 9.9.9 beta2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:* | 9.9.9 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:* | 9.9.9 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:* | 9.9.9 p3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:* | 9.10.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:beta1:*:*:*:*:*:* | 9.10.4 beta1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:beta2:*:*:*:*:*:* | 9.10.4 beta2 | Vulnerable | ISC |
- cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* Versions 9.0.0 to before 9.9.9; 9.10.0 to before 9.10.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:* Versions 9.9.9 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:beta1:*:*:*:*:*:* Versions 9.9.9 beta1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:beta2:*:*:*:*:*:* Versions 9.9.9 beta2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:* Versions 9.9.9 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:* Versions 9.9.9 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:* Versions 9.9.9 p3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:* Versions 9.10.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:beta1:*:*:*:*:*:* Versions 9.10.4 beta1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:beta2:*:*:*:*:*:* Versions 9.10.4 beta2 Vulnerable ·ISC
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:isc:bind:9.10.4:beta3:*:*:*:*:*:* | 9.10.4 beta3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:* | 9.10.4 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:* | 9.10.4 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:* | 9.10.4 p3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:* | 9.11.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:alpha1:*:*:*:*:*:* | 9.11.0 alpha1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:alpha2:*:*:*:*:*:* | 9.11.0 alpha2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:alpha3:*:*:*:*:*:* | 9.11.0 alpha3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:beta1:*:*:*:*:*:* | 9.11.0 beta1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:beta2:*:*:*:*:*:* | 9.11.0 beta2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.0:beta3:*:*:*:*:*:* | 9.11.0 beta3 | Vulnerable | ISC |
| cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* | 6.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* | 6.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* | 6.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* | 6.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:* | 6.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* | 6.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
- cpe:2.3:a:isc:bind:9.10.4:beta3:*:*:*:*:*:* Versions 9.10.4 beta3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:* Versions 9.10.4 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:* Versions 9.10.4 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:* Versions 9.10.4 p3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:* Versions 9.11.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:alpha1:*:*:*:*:*:* Versions 9.11.0 alpha1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:alpha2:*:*:*:*:*:* Versions 9.11.0 alpha2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:alpha3:*:*:*:*:*:* Versions 9.11.0 alpha3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:beta1:*:*:*:*:*:* Versions 9.11.0 beta1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:beta2:*:*:*:*:*:* Versions 9.11.0 beta2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.0:beta3:*:*:*:*:*:* Versions 9.11.0 beta3 Vulnerable ·ISC
- cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
Remediation
Red Hat 5 advisories
- RHSA-2017:1583 Released 2017-06-28 · Red Hat rating Importantbind security and bug fix update
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-libs-32:9.9.4-29.el7_2.6, bind-libs-lite-32:9.9.4-29.el7_2.6 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-chroot-32:9.9.4-29.el7_2.6, bind-devel-32:9.9.4-29.el7_2.6 +7
- Red Hat Enterprise Linux Server EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-chroot-32:9.9.4-29.el7_2.6, bind-libs-32:9.9.4-29.el7_2.6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.6, bind-devel-32:9.9.4-29.el7_2.6.ppc, bind-lite-devel-32:9.9.4-29.el7_2.6 +9
- RHSA-2016:2871 Released 2016-12-06 · Red Hat rating Importantbind security update
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.9, bind-libs-32:9.8.2-0.37.rc1.el6_7.9, bind-utils-32:9.8.2-0.37.rc1.el6_7.9
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.9, bind-chroot-32:9.8.2-0.37.rc1.el6_7.9, bind-devel-32:9.8.2-0.37.rc1.el6_7.9 +1
- Red Hat Enterprise Linux Server AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.6, bind-chroot-32:9.7.3-8.P3.el6_2.6, bind-libs-32:9.7.3-8.P3.el6_2.6 +1
- Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.10, bind-chroot-32:9.8.2-0.17.rc1.el6_4.10, bind-libs-32:9.8.2-0.17.rc1.el6_4.10 +1
- Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.5, bind-chroot-32:9.8.2-0.23.rc1.el6_5.5, bind-libs-32:9.8.2-0.23.rc1.el6_5.5 +1
- Red Hat Enterprise Linux Server AUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.7, bind-chroot-32:9.8.2-0.30.rc1.el6_6.7, bind-libs-32:9.8.2-0.30.rc1.el6_6.7 +1
- Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.9, bind-chroot-32:9.8.2-0.37.rc1.el6_7.9, bind-libs-32:9.8.2-0.37.rc1.el6_7.9 +2
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.6, bind-devel-32:9.7.3-8.P3.el6_2.6, bind-sdb-32:9.7.3-8.P3.el6_2.6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.10, bind-devel-32:9.8.2-0.17.rc1.el6_4.10, bind-sdb-32:9.8.2-0.17.rc1.el6_4.10
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.5, bind-devel-32:9.8.2-0.23.rc1.el6_5.5, bind-sdb-32:9.8.2-0.23.rc1.el6_5.5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.7, bind-sdb-32:9.8.2-0.30.rc1.el6_6.7
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.9, bind-devel-32:9.8.2-0.37.rc1.el6_7.9.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.9
- Red Hat Enterprise Linux Server Optional TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.5, bind-devel-32:9.8.2-0.23.rc1.el6_5.5, bind-sdb-32:9.8.2-0.23.rc1.el6_5.5
- Red Hat Enterprise Linux Server Optional TUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.7, bind-sdb-32:9.8.2-0.30.rc1.el6_6.7
- Red Hat Enterprise Linux Server TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.5, bind-chroot-32:9.8.2-0.23.rc1.el6_5.5, bind-libs-32:9.8.2-0.23.rc1.el6_5.5 +1
- Red Hat Enterprise Linux Server TUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.7, bind-chroot-32:9.8.2-0.30.rc1.el6_6.7, bind-libs-32:9.8.2-0.30.rc1.el6_6.7 +1
- RHSA-2016:2615 Released 2016-11-03 · Red Hat rating Importantbind security update
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-38.el7_3, bind-libs-32:9.9.4-38.el7_3, bind-libs-lite-32:9.9.4-38.el7_3 +2
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-38.el7_3, bind-chroot-32:9.9.4-38.el7_3, bind-devel-32:9.9.4-38.el7_3 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-38.el7_3, bind-libs-32:9.9.4-38.el7_3, bind-libs-lite-32:9.9.4-38.el7_3 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-38.el7_3, bind-chroot-32:9.9.4-38.el7_3, bind-devel-32:9.9.4-38.el7_3 +7
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-38.el7_3, bind-chroot-32:9.9.4-38.el7_3, bind-libs-32:9.9.4-38.el7_3 +8
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-38.el7_3, bind-devel-32:9.9.4-38.el7_3.ppc, bind-lite-devel-32:9.9.4-38.el7_3 +9
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-38.el7_3, bind-chroot-32:9.9.4-38.el7_3, bind-libs-32:9.9.4-38.el7_3 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-38.el7_3, bind-lite-devel-32:9.9.4-38.el7_3, bind-pkcs11-devel-32:9.9.4-38.el7_3 +2
Show 2 more Red Hat advisories
- RHSA-2016:2141 Released 2016-11-02 · Red Hat rating Importantbind security update
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-25.P1.el5_11.11, bind-30:9.3.6-25.P1.el5_11.11.i386, bind-30:9.3.6-25.P1.el5_11.11.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-25.P1.el5_11.11, bind-30:9.3.6-25.P1.el5_11.11.i386, bind-libs-30:9.3.6-25.P1.el5_11.11 +5
- Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-libs-32:9.8.2-0.47.rc1.el6_8.3, bind-utils-32:9.8.2-0.47.rc1.el6_8.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-chroot-32:9.8.2-0.47.rc1.el6_8.3, bind-devel-32:9.8.2-0.47.rc1.el6_8.3 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-25.P1.el5_11.11, bind-chroot-30:9.3.6-25.P1.el5_11.11, bind-chroot-30:9.3.6-25.P1.el5_11.11.i386 +6
- Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-libs-32:9.8.2-0.47.rc1.el6_8.3, bind-utils-32:9.8.2-0.47.rc1.el6_8.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-chroot-32:9.8.2-0.47.rc1.el6_8.3, bind-devel-32:9.8.2-0.47.rc1.el6_8.3 +1
- Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-chroot-32:9.8.2-0.47.rc1.el6_8.3, bind-libs-32:9.8.2-0.47.rc1.el6_8.3 +2
- Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.3, bind-devel-32:9.8.2-0.47.rc1.el6_8.3.ppc, bind-sdb-32:9.8.2-0.47.rc1.el6_8.3
- Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.3, bind-chroot-32:9.8.2-0.47.rc1.el6_8.3, bind-libs-32:9.8.2-0.47.rc1.el6_8.3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.3, bind-sdb-32:9.8.2-0.47.rc1.el6_8.3
- RHSA-2016:2142 Released 2016-11-02 · Red Hat rating Importantbind97 security update
- Red Hat Enterprise Linux (v. 5 server) bind97-32:9.7.0-21.P2.el5_11.9, bind97-32:9.7.0-21.P2.el5_11.9.i386, bind97-32:9.7.0-21.P2.el5_11.9.ia64 +17
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind97-32:9.7.0-21.P2.el5_11.9, bind97-32:9.7.0-21.P2.el5_11.9.i386, bind97-chroot-32:9.7.0-21.P2.el5_11.9 +7
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2016:2141, RHSA-2016:2142 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) | Fixed | RHSA-2017:1583 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) | Fixed | RHSA-2017:1583 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2016:2141, RHSA-2016:2142 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux HPC Node EUS (v. 6.7) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux Server AUS (v. 6.2) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server AUS (v. 6.4) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server AUS (v. 6.5) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server AUS (v. 6.6) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server EUS (v. 6.7) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server EUS (v. 7.2) | Fixed | RHSA-2017:1583 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.2) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.4) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.5) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.6) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.7) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional EUS (v. 7.2) | Fixed | RHSA-2017:1583 |
| Red Hat Enterprise Linux Server Optional TUS (v. 6.5) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server Optional TUS (v. 6.6) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server TUS (v. 6.5) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Server TUS (v. 6.6) | Fixed | RHSA-2016:2871 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2016:2615 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2016:2141 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2016:2615 |
Timeline
- 2026-10-02 Threatist record created from CVE-2016-8864
- 2026-10-03 Alias added: GHSA-xgmw-gxmf-fm4w
References
Advisory 11
Sources
- CVE-2016-8864 · CVE Program
- CVE-2016-8864 · NVD
- FIRST EPSS
- GHSA-xgmw-gxmf-fm4w · GitHub Advisory Database · CC BY 4.0
- CVE-2016-8864 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences