CVE-2016-1285: canonical ubuntu_linux
CVSS: 6.8v3.1MediumModified
AliasesUBUNTU-CVE-2016-1285DEBIAN-CVE-2016-1285
Published 09-03-2016Last modified 05-08-2024
Vulnerability summary
CVE-2016-1285 is a medium (CVSS 6.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 59.14% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v3.1 (NVD)EPSS score
59.14%
0%100%
Critical · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 12 · Related 6Timeline
- 09-03-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
CVSS metrics
5 scores · 3 sources · 3 versionsMedium 6.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Medium 6.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:HSourcesSingle source
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
59.14%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 59.14% on 18-09-2026
18-09-202618-10-2026
EPSS score59.14%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse7 products
- linux_enterprise_debuginfo11:sp2 | 11:sp3 | 11:sp4
- linux_enterprise_desktop11:sp4 | 12 | 12:sp1
- linux_enterprise_server11:sp2 | 11:sp3 | 11:sp4 | 12 | 12:sp1
- linux_enterprise_software_development_kit11:sp4 | 12 | 12:sp1
- manager2.1
Debian2 products
- bind9< 1:9.10.3.dfsg.P4-6
- debian_linuxEOL7.0 | 8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Fedoraproject1 product
- fedoraEOL22 | 23 | 24
Isc1 product
- bind≥ 9.0.0, < 9.9.8 | ≥ 9.10.0, < 9.10.3 | 9.9.8 | 9.9.8:p2 | 9.9.8:p3 | 9.9.8:rc1 | 9.10.3 | 9.10.3:beta1 | 9.10.3:p1 | 9.10.3:p2 | 9.10.3:p3 | 9.10.3:rc1
Juniper1 product
- junos12.1x46 | 12.1x46:d10 | 12.1x46:d15 | 12.1x46:d20 | 12.1x46:d25 | 12.1x46:d30 | 12.1x46:d35 | 12.1x46:d40 | 12.1x46:d45 | 12.1x46:d50 | 12.1x46:d55 | 12.1x46:d60 | 12.1x46:d65 | 12.1x46:d66 | 12.1x46:d67 | 12.1x46:d70 | 12.1x46:d71 | 12.1x46:d72 | 12.1x46:d73 | 12.1x46:d76 | 12.1x46:d77 | 12.1x46-d10 | 12.1x46-d76 | 12.3x48 | 12.3x48:d10 | 12.3x48:d15 | 12.3x48:d20 | 12.3x48:d25 | 12.3x48:d30 | 12.3x48:d35 | 12.3x48:d40 | 12.3x48:d45 | 12.3x48:d50 | 12.3x48:d51 | 12.3x48:d55 | 12.3x48:d60 | 12.3x48:d65 | 12.3x48:d66 | 12.3x48:d70 | 12.3x48:d75 | 15.1x49:d10 | 15.1x49:d100 | 15.1x49:d110 | 15.1x49:d120 | 15.1x49:d130 | 15.1x49:d131 | 15.1x49:d140 | 15.1x49:d15 | 15.1x49:d150 | 15.1x49:d160 | 15.1x49:d170 | 15.1x49:d180 | 15.1x49:d20 | 15.1x49:d25 | 15.1x49:d30 | 15.1x49:d35 | 15.1x49:d40 | 15.1x49:d45 | 15.1x49:d50 | 15.1x49:d55 | 15.1x49:d60 | 15.1x49:d65 | 15.1x49:d70 | 15.1x49:d75 | 15.1x49:d80 | 15.1x49:d90 | 17.3 | 17.3:r1 | 17.3:r1-s1 | 17.3:r1-s4 | 17.3:r2 | 17.3:r2-s1 | 17.3:r2-s2 | 17.3:r2-s3 | 17.3:r2-s4 | 17.3:r2-s5 | 17.3:r3 | 17.3:r3-s1 | 17.3:r3-s2 | 17.3:r3-s3 | 17.3:r3-s4 | 17.3:r3-s5 | 17.3:r3-s6 | 17.4 | 17.4:r1 | 17.4:r1-s1 | 17.4:r1-s2 | 17.4:r1-s3 | 17.4:r1-s4 | 17.4:r1-s5 | 17.4:r1-s6 | 17.4:r1-s7 | 17.4:r2 | 17.4:r2-s1 | 17.4:r2-s10 | 17.4:r2-s11 | 17.4:r2-s12 | 17.4:r2-s13 | 17.4:r2-s2 | 17.4:r2-s3 | 17.4:r2-s4 | 17.4:r2-s5 | 17.4:r2-s6 | 17.4:r2-s7 | 17.4:r2-s8 | 17.4:r2-s9 | 18.1 | 18.1:r1 | 18.1:r2 | 18.1:r2-s1 | 18.1:r2-s2 | 18.1:r2-s4 | 18.1:r3 | 18.1:r3-s1 | 18.1:r3-s13 | 18.1:r3-s2 | 18.1:r3-s3 | 18.1:r3-s4 | 18.1:r3-s5 | 18.1:r3-s6 | 18.1:r3-s7 | 18.1:r3-s8 | 18.2 | 18.2:r1 | 18.2:r1-s2 | 18.2:r1-s3 | 18.2:r1-s4 | 18.2:r1-s5 | 18.2:r2 | 18.2:r2-s1 | 18.2:r2-s2 | 18.2:r2-s3 | 18.2:r2-s4 | 18.2:r2-s5 | 18.2:r2-s6 | 18.2:r2-s7 | 18.2:r2-s8 | 18.3 | 18.3:r1 | 18.3:r1-s1 | 18.3:r1-s2 | 18.3:r1-s3 | 18.3:r1-s4 | 18.3:r1-s5 | 18.3:r1-s6 | 18.4 | 18.4:r1 | 18.4:r1-s1 | 18.4:r1-s2 | 18.4:r1-s3 | 18.4:r1-s4 | 18.4:r1-s5
Ubuntu1 product
- bind9< 1:9.9.5.dfsg-3ubuntu0.8
8 vendors · 16 products
References
33 links- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.htmlVendor AdvisoryX Refsource FEDORAMailing List
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.htmlVendor AdvisoryX Refsource SUSEMailing List
- security.freebsd.org/advisories/FreeBSD-SA-16:13.bind.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
- www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlX Refsource CONFIRMThird Party Advisory
Show all 33 references
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.htmlVendor AdvisoryX Refsource FEDORAMailing List
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.htmlVendor AdvisoryX Refsource SUSEMailing List
- marc.info?l=bugtraq&m=146191105921542&w=2Vendor AdvisoryX Refsource HPIssue TrackingThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.htmlVendor AdvisoryX Refsource FEDORAMailing List
- lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.htmlVendor AdvisoryX Refsource FEDORAMailing List
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821X Refsource CONFIRMThird Party Advisory
- www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.htmlVendor AdvisoryX Refsource FEDORAMailing List
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.htmlVendor AdvisoryX Refsource FEDORAMailing List