CVE-2016-1286: canonical ubuntu_linux

CVSS: 8.6v3.1HighModified

AliasesUBUNTU-CVE-2016-1286DEBIAN-CVE-2016-1286

Published 09-03-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-1286 is a high (CVSS 8.6) vulnerability in canonical ubuntu_linux. EPSS estimates a 62.10% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities.

Overall risk

47/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.6/10

010

High · v3.1 (NVD)

EPSS score

62.10%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 6

DSA-3511-1 MGASA-2016-0107 OPENSUSE-SU-2024:10467-1 RHSA-2016:0458 RHSA-2016:0459 RHSA-2016:0562+6 more

Timeline

09-03-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

CVSS metrics

5 scores · 3 sources · 3 versions

v3.18.6v3.08.6v2.05.0

EPSS trend

Probability

62.10%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 62.10% on 18-09-2026

18-09-202618-10-2026

EPSS score

62.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse7 products

linux_enterprise_debuginfo11:sp2 | 11:sp3 | 11:sp4
linux_enterprise_desktop11:sp4 | 12 | 12:sp1
linux_enterprise_server11:sp2 | 11:sp3 | 11:sp4 | 12 | 12:sp1
linux_enterprise_software_development_kit11:sp4 | 12 | 12:sp1
manager2.1

Show all 7

Debian2 products

bind9< 1:9.10.3.dfsg.P4-6
debian_linuxEOL7.0 | 8.0 | 9.0

Opensuse2 products

leapEOL42.1
opensuseEOL11.4 | 13.1 | 13.2

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 15.10

Fedoraproject1 product

fedoraEOL22 | 23 | 24

Isc1 product

bind≥ 9.0.0, < 9.9.8 | ≥ 9.10.0, < 9.10.3 | 9.9.8 | 9.9.8:p2 | 9.9.8:p3 | 9.9.8:rc1 | 9.10.3 | 9.10.3:beta1 | 9.10.3:p1 | 9.10.3:p2 | 9.10.3:p3 | 9.10.3:rc1

Juniper1 product

junos12.1x46 | 12.1x46:d10 | 12.1x46:d15 | 12.1x46:d20 | 12.1x46:d25 | 12.1x46:d30 | 12.1x46:d35 | 12.1x46:d40 | 12.1x46:d45 | 12.1x46:d50 | 12.1x46:d55 | 12.1x46:d60 | 12.1x46:d65 | 12.1x46:d66 | 12.1x46:d67 | 12.1x46:d70 | 12.1x46:d71 | 12.1x46:d72 | 12.1x46:d73 | 12.1x46:d76 | 12.1x46:d77 | 12.1x46-d10 | 12.1x46-d76 | 12.3x48 | 12.3x48:d10 | 12.3x48:d15 | 12.3x48:d20 | 12.3x48:d25 | 12.3x48:d30 | 12.3x48:d35 | 12.3x48:d40 | 12.3x48:d45 | 12.3x48:d50 | 12.3x48:d51 | 12.3x48:d55 | 12.3x48:d60 | 12.3x48:d65 | 12.3x48:d66 | 12.3x48:d70 | 12.3x48:d75 | 15.1x49:d10 | 15.1x49:d100 | 15.1x49:d110 | 15.1x49:d120 | 15.1x49:d130 | 15.1x49:d131 | 15.1x49:d140 | 15.1x49:d15 | 15.1x49:d150 | 15.1x49:d160 | 15.1x49:d170 | 15.1x49:d180 | 15.1x49:d20 | 15.1x49:d25 | 15.1x49:d30 | 15.1x49:d35 | 15.1x49:d40 | 15.1x49:d45 | 15.1x49:d50 | 15.1x49:d55 | 15.1x49:d60 | 15.1x49:d65 | 15.1x49:d70 | 15.1x49:d75 | 15.1x49:d80 | 15.1x49:d90 | 17.3 | 17.3:r1 | 17.3:r1-s1 | 17.3:r1-s4 | 17.3:r2 | 17.3:r2-s1 | 17.3:r2-s2 | 17.3:r2-s3 | 17.3:r2-s4 | 17.3:r2-s5 | 17.3:r3 | 17.3:r3-s1 | 17.3:r3-s2 | 17.3:r3-s3 | 17.3:r3-s4 | 17.3:r3-s5 | 17.3:r3-s6 | 17.4 | 17.4:r1 | 17.4:r1-s1 | 17.4:r1-s2 | 17.4:r1-s3 | 17.4:r1-s4 | 17.4:r1-s5 | 17.4:r1-s6 | 17.4:r1-s7 | 17.4:r2 | 17.4:r2-s1 | 17.4:r2-s10 | 17.4:r2-s11 | 17.4:r2-s12 | 17.4:r2-s13 | 17.4:r2-s2 | 17.4:r2-s3 | 17.4:r2-s4 | 17.4:r2-s5 | 17.4:r2-s6 | 17.4:r2-s7 | 17.4:r2-s8 | 17.4:r2-s9 | 18.1 | 18.1:r1 | 18.1:r2 | 18.1:r2-s1 | 18.1:r2-s2 | 18.1:r2-s4 | 18.1:r3 | 18.1:r3-s1 | 18.1:r3-s13 | 18.1:r3-s2 | 18.1:r3-s3 | 18.1:r3-s4 | 18.1:r3-s5 | 18.1:r3-s6 | 18.1:r3-s7 | 18.1:r3-s8 | 18.2 | 18.2:r1 | 18.2:r1-s2 | 18.2:r1-s3 | 18.2:r1-s4 | 18.2:r1-s5 | 18.2:r2 | 18.2:r2-s1 | 18.2:r2-s2 | 18.2:r2-s3 | 18.2:r2-s4 | 18.2:r2-s5 | 18.2:r2-s6 | 18.2:r2-s7 | 18.2:r2-s8 | 18.3 | 18.3:r1 | 18.3:r1-s1 | 18.3:r1-s2 | 18.3:r1-s3 | 18.3:r1-s4 | 18.3:r1-s5 | 18.3:r1-s6 | 18.4 | 18.4:r1 | 18.4:r1-s1 | 18.4:r1-s2 | 18.4:r1-s3 | 18.4:r1-s4 | 18.4:r1-s5

Ubuntu1 product

bind9< 1:9.9.5.dfsg-3ubuntu0.8

8 vendors · 16 products

References

33 links

www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.debian.org/security/2016/dsa-3511Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securitytracker.com/id/1035237VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-16:13.bind.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
kb.isc.org/article/AA-01438X Refsource CONFIRMBroken LinkVendor Advisory
www.ubuntu.com/usn/USN-2925-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlX Refsource CONFIRMThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0562.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 33 references

lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/201610-07Vendor AdvisoryX Refsource GENTOOThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
marc.info?l=bugtraq&m=146191105921542&w=2Vendor AdvisoryX Refsource HPIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
kb.isc.org/article/AA-01380X Refsource CONFIRMRelease NotesVendor Advisory
kb.isc.org/article/AA-01353X Refsource CONFIRMVendor AdvisoryREPORT
lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0601.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
ubuntu.com/security/CVE-2016-1286REPORT
ubuntu.com/security/notices/USN-2925-1Advisory
www.cve.org/CVERecord?id=CVE-2016-1286REPORT
security-tracker.debian.org/tracker/CVE-2016-1286Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities