F5 Networks BIG-IP : BIND vulnerability (K18829561)
High Nessus Plugin ID 95939
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionTesting by ISC has uncovered a critical error condition which can occur when a nameserver is constructing a response. A defect in the rendering of messages into packets can cause named to exit with an assertion failure in buffer.c while constructing a response to a query that meets certain criteria.This assertion can be triggered even if the apparent source address isn't allowed to make queries (i.e.
doesn't match 'allow-query').(CVE-2016-2776)
SolutionUpgrade to one of the non-vulnerable versions listed in the F5 Solution K18829561.