CVE-2016-8864 log

Source
Severity High
Remote Yes
Type Denial of service
Description
A defect in BIND's handling of responses containing a DNAME answer can cause a resolver to exit after encountering an assertion failure in db.c or resolver.c

During processing of a recursive response that contains a DNAME record in the answer section, BIND can stop execution after encountering an assertion error in resolver.c (error message: "INSIST((valoptions & 0x0002U) != 0) failed") or db.c (error message: "REQUIRE(targetp != ((void *)0) && *targetp == ((void *)0)) failed").

A server encountering either of these error conditions will stop, resulting in denial of service to clients.  The risk to authoritative servers is minimal; recursive servers are chiefly at risk.
Group Package Affected Fixed Severity Status Ticket
AVG-59 bind 9.11.0-2 9.11.0.P1-1 High Fixed
Date Advisory Group Package Severity Type
01 Nov 2016 ASA-201611-3 AVG-59 bind High denial of service
References
http://ftp.isc.org/isc/bind9/9.11.0-P1/RELEASE-NOTES-bind-9.11.0-P1.html
https://kb.isc.org/article/AA-01434/0