New version fixing CVE-2016-1285 CVE-2016-1286 CVE-2016-2088

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the instance of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists in files     sexpr.c and alist.c when handling control channel     packets. An unauthenticated, remote attacker can     exploit this, via crafted packets sent to the control     channel (rndc) interface, to cause an assertion failure     and daemon exit. (CVE-2016-1285)

  - A denial of service vulnerability exists in resolver.c     when DNS cookies are enabled. An unauthenticated, remote     attacker can exploit this, via a malformed cookie with     more than one cookie option, to cause an INSIST     assertion failure and daemon exit. (CVE-2016-2088)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists in files     resolver.c and db.c when handling DNAME resource     signatures. An unauthenticated, remote attacker can     exploit this, via a crafted query that generates a     response containing a signature record, to cause an     assertion failure and daemon exit. (CVE-2016-1286)

  - A denial of service vulnerability exists in resolver.c     when DNS cookies are enabled. An unauthenticated, remote     attacker can exploit this, via a malformed cookie with     more than one cookie option, to cause an INSIST     assertion failure and daemon exit. (CVE-2016-2088)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, ISC BIND installed on the remote name server is affected by a denial of service vulnerability in file resolver.c when DNS cookies are enabled. An unauthenticated, remote attacker can exploit his, via a malformed packet with more than one cookie option, to cause an INSIST assertion failure and daemon exit.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ISC reports :

A response containing multiple DNS cookies causes servers with cookie support enabled to exit with an assertion failure.

The remote host is affected by the vulnerability described in GLSA-201610-07 (BIND: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in BIND. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a Denial of Service condition through       multiple attack vectors.
  Workaround :

    There is no known workaround at this time.

Versions of ISC BIND 9.10.x prior to 9.10.3-P4 are unpatched for a flaw in 'resolver.c' that is triggered when handling a packet with multiple DNS cookies.  This may allow a remote attacker to cause a denial of service.

ID	Name	Product	Family	Published	Updated	Severity
89885	Fedora 23 : bind-9.10.3-12.P4.fc23 (2016-b593e84223)	Nessus	Fedora Local Security Checks	3/14/2016	1/11/2021	high
89998	ISC BIND 9 Multiple DoS	Nessus	DNS	3/17/2016	11/20/2019	medium
89999	ISC BIND 9 Multiple DoS	Nessus	DNS	3/17/2016	11/20/2019	high
90329	Fedora 22 : bind-9.10.3-9.P4.fc22 (2016-364c0a9df4)	Nessus	Fedora Local Security Checks	4/5/2016	1/11/2021	high
90000	ISC BIND 9 resolver.c Multiple DNS Cookie Packet Handling DoS	Nessus	DNS	3/17/2016	11/20/2019	medium
90239	FreeBSD : bind -- denial of service vulnerability (cd409df7-f483-11e5-92ce-002590263bf5)	Nessus	FreeBSD Local Security Checks	3/28/2016	1/4/2021	medium
90215	Fedora 24 : bind-9.10.3-12.P4.fc24 (2016-75f31fbb0a)	Nessus	Fedora Local Security Checks	3/28/2016	1/11/2021	high
93994	GLSA-201610-07 : BIND: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/12/2016	1/11/2021	high
9873	ISC BIND 9.10.x < 9.10.3-P4 DoS	Nessus Network Monitor	DNS Servers	1/20/2017	3/6/2019	high

Detections

Analytics

Plugins Search

high

medium

high

high

medium

medium

high

high

high