CVE-2016-8864

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...

7.5 HighFix available

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

38.7%Up 15.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2016-8864
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-617
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-8864
Updated: 2026-11-02

EUVDEUVD-2016-9689 No score

Record: EUVD-2016-9689
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xgmw-gxmf-fm4w 7.5

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...

Record: GHSA-xgmw-gxmf-fm4w
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-617
Updated: 2026-11-02

OSVALPINE-CVE-2016-8864 7.5

Record: ALPINE-CVE-2016-8864
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.5

Record: CVE-2016-8864
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 14 moreShow less

OSVDEBIAN-CVE-2016-8864 7.5

Record: DEBIAN-CVE-2016-8864
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2016:2141 7.5

Red Hat Security Advisory: bind security update

Record: RHSA-2016:2141
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2016:2142 7.5

Red Hat Security Advisory: bind97 security update

Record: RHSA-2016:2142
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2016:2615 7.5

Red Hat Security Advisory: bind security update

Record: RHSA-2016:2615
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2016:2871 7.5

Red Hat Security Advisory: bind security update

Record: RHSA-2016:2871
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2017:1583 7.5

Red Hat Security Advisory: bind security and bug fix update

Record: RHSA-2017:1583
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-8864 7.5

Record: UBUNTU-CVE-2016-8864
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2016-0365 No score

Updated bind packages fix security vulnerability

Tony Finch and Marco Davids discovered that Bind incorrectly handled certain responses containing a DNAME answer. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service (CVE-2016-8864).

Record: MGASA-2016-0365
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10467-1 No score

bind-9.10.3P4-21.1 on GA media

These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10467-1
Updated: 2026-11-02

OSVSUSE-SU-2016:2696-1 No score

Security update for bind

This update for bind fixes the following security issue:

A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).

Record: SUSE-SU-2016:2696-1
Updated: 2026-11-02

OSVSUSE-SU-2016:2697-1 No score

Security update for bind

This update for bind fixes the following issues:

A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).
Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

Record: SUSE-SU-2016:2697-1
Updated: 2026-11-02

OSVSUSE-SU-2016:2697-2 No score

Security update for bind

This update for bind fixes the following issues:

A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).
Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

Record: SUSE-SU-2016:2697-2
Updated: 2026-11-02

OSVSUSE-SU-2016:2706-1 No score

Security update for bind

This update for bind fixes the following issues:

A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).
Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

Record: SUSE-SU-2016:2706-1
Updated: 2026-11-02

OSVUSN-3119-1 No score

bind9 vulnerability

Record: USN-3119-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bind` Alpine:v3.2	9.0.0 up to 9.10.4_p4-r0	9.10.4_p4-r0
`bind` Alpine:v3.3	9.0.0 up to 9.10.4_p4-r0	9.10.4_p4-r0
`bind9` Debian:12	before 1:9.10.3.dfsg.P4-11	1:9.10.3.dfsg.P4-11
`bind9` Debian:13	before 1:9.10.3.dfsg.P4-11	1:9.10.3.dfsg.P4-11
`bind9` Debian:14	before 1:9.10.3.dfsg.P4-11	1:9.10.3.dfsg.P4-11
`bind9` Debian:7	before 1:9.8.4.dfsg.P1-6+nmu2+deb7u13, plus listed versions 1:9.8.4.dfsg.P1-6+nmu21:9.8.4.dfsg.P1-6+nmu2+deb7u11:9.8.4.dfsg.P1-6+nmu2+deb7u101:9.8.4.dfsg.P1-6+nmu2+deb7u111:9.8.4.dfsg.P1-6+nmu2+deb7u12 Show 10 moreShow less 1:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u21:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u31:9.8.4.dfsg.P1-6+nmu2+deb7u41:9.8.4.dfsg.P1-6+nmu2+deb7u51:9.8.4.dfsg.P1-6+nmu2+deb7u61:9.8.4.dfsg.P1-6+nmu2+deb7u71:9.8.4.dfsg.P1-6+nmu2+deb7u81:9.8.4.dfsg.P1-6+nmu2+deb7u9	1:9.8.4.dfsg.P1-6+nmu2+deb7u13
`bind9` Debian:8	before 1:9.9.5.dfsg-9+deb8u8, plus listed versions 1:9.9.5.dfsg-91:9.9.5.dfsg-9+deb8u11:9.9.5.dfsg-9+deb8u21:9.9.5.dfsg-9+deb8u31:9.9.5.dfsg-9+deb8u41:9.9.5.dfsg-9+deb8u51:9.9.5.dfsg-9+deb8u61:9.9.5.dfsg-9+deb8u7	1:9.9.5.dfsg-9+deb8u8
`bind` Mageia:5	before 9.10.3.P4-1.2.mga5	9.10.3.P4-1.2.mga5
`bind` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-debuginfo` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11

Show 228 moreShow less

Affected packages
Package	Affected	Fixed
`bind-libs` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-sdb` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-utils` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-chroot` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-devel` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-libbind-devel` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`caching-nameserver` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-chroot` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-debuginfo` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-devel` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-libbind-devel` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-libs` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-sdb` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind-utils` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`caching-nameserver` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.11	30:9.3.6-25.P1.el5_11.11
`bind` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-debuginfo` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-libs` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-utils` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-chroot` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-devel` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-sdb` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-debuginfo` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-libs` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-utils` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-chroot` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-devel` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-sdb` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-chroot` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-debuginfo` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-libs` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-utils` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-devel` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-sdb` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-chroot` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-debuginfo` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-libs` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-utils` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-devel` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind-sdb` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.47.rc1.el6_8.3	32:9.8.2-0.47.rc1.el6_8.3
`bind97` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-chroot` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-devel` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-libs` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-utils` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-chroot` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-debuginfo` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-devel` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-libs` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind97-utils` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.9	32:9.7.0-21.P2.el5_11.9
`bind` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-debuginfo` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs-lite` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-license` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-utils` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-chroot` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-devel` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-lite-devel` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-devel` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-libs` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-utils` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb-chroot` Red Hat:enterprise_linux:7::client	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-debuginfo` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs-lite` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-license` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-utils` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-chroot` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-devel` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-lite-devel` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-devel` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-libs` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-utils` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb-chroot` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-chroot` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-debuginfo` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs-lite` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-license` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-libs` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-utils` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-utils` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-devel` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-lite-devel` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-devel` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb-chroot` Red Hat:enterprise_linux:7::server	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-chroot` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-debuginfo` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-libs-lite` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-license` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-libs` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-utils` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-utils` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-devel` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-lite-devel` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-pkcs11-devel` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind-sdb-chroot` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-38.el7_3	32:9.9.4-38.el7_3
`bind` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-debuginfo` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-libs` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-utils` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-chroot` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-devel` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-sdb` Red Hat:rhel_eus:6.7::computenode	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-chroot` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-debuginfo` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-libs` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-utils` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-chroot` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-debuginfo` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-libs` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-utils` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-chroot` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-debuginfo` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-libs` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-utils` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-chroot` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-debuginfo` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-libs` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-utils` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-chroot` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-debuginfo` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-libs` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-utils` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-chroot` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-debuginfo` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-libs` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-utils` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-chroot` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-debuginfo` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-libs` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-utils` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-devel` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-sdb` Red Hat:rhel_mission_critical:6.2::server	before 32:9.7.3-8.P3.el6_2.6	32:9.7.3-8.P3.el6_2.6
`bind-devel` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-sdb` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.10	32:9.8.2-0.17.rc1.el6_4.10
`bind-devel` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-sdb` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-devel` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-sdb` Red Hat:rhel_tus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.5	32:9.8.2-0.23.rc1.el6_5.5
`bind-devel` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-sdb` Red Hat:rhel_aus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-devel` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-sdb` Red Hat:rhel_tus:6.6::server	before 32:9.8.2-0.30.rc1.el6_6.7	32:9.8.2-0.30.rc1.el6_6.7
`bind-devel` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind-sdb` Red Hat:rhel_eus:6.7::server	before 32:9.8.2-0.37.rc1.el6_7.9	32:9.8.2-0.37.rc1.el6_7.9
`bind` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-debuginfo` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-libs` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-libs-lite` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-license` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-utils` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-chroot` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-devel` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-lite-devel` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-devel` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-libs` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-utils` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-sdb` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-sdb-chroot` Red Hat:rhel_eus:7.2::computenode	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-chroot` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-debuginfo` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-libs` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-libs-lite` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-license` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-libs` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-utils` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-utils` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-devel` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-lite-devel` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-pkcs11-devel` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-sdb` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind-sdb-chroot` Red Hat:rhel_eus:7.2::server	before 32:9.9.4-29.el7_2.6	32:9.9.4-29.el7_2.6
`bind` SUSE:Linux Enterprise Server for SAP Applications 12	before 9.9.9P1-28.23.1	9.9.9P1-28.23.1
`bind` SUSE:Linux Enterprise Server 12-LTSS	before 9.9.9P1-28.23.1	9.9.9P1-28.23.1
`bind` SUSE:Linux Enterprise Desktop 12 SP1	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Desktop 12 SP2	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Software Development Kit 12 SP1	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Software Development Kit 12 SP2	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Server 12 SP1	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Server 12 SP2	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2	before 9.9.9P1-49.1	9.9.9P1-49.1
`bind` SUSE:Linux Enterprise Software Development Kit 11 SP4	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:OpenStack Cloud 5	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Manager 2.1	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Manager Proxy 2.1	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Point of Sale 11 SP3	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Server 11 SP2-LTSS	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Server 11 SP3-LTSS	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Server 11 SP3-TERADATA	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Server 11 SP4	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 9.9.6P1-0.33.1	9.9.6P1-0.33.1
`bind9` Ubuntu:14.04:LTS	before 1:9.9.5.dfsg-3ubuntu0.10, plus listed versions 1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3 Show 9 moreShow less 1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.9	1:9.9.5.dfsg-3ubuntu0.10
`bind9` Ubuntu:16.04:LTS	before 1:9.10.3.dfsg.P4-8ubuntu1.2, plus listed versions 1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4 Show 7 moreShow less 1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.1	1:9.10.3.dfsg.P4-8ubuntu1.2
`bind` openSUSE:Tumbleweed	before 9.10.3P4-21.1	9.10.3P4-21.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-8864 is a high vulnerability (CVSS 7.5) in Isc Bind, published November 1, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 38.7%, the 98th percentile. Fixed in bind 9.10.4_p4-r0.

References

Show 96 moreShow less