CVE-2016-8864: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote a...

Security readout for executives and security teams

This issue can let a remote party crash BIND named when it handles a crafted DNS response involving a DNAME record during recursive resolution. The business impact is DNS service disruption, not data theft or system takeover based on the provided sources. Exposure is most relevant where affected BIND named versions perform recursive DNS resolution. Public or broadly accessible recursive resolvers have higher operational risk because daemon exit can interrupt name resolution for dependent users and services. Prioritize remediation for internet-facing or business-critical recursive DNS. A successful attack can cause DNS outages, affecting application access and user productivity, but the provided sources do not indicate code execution or confirmed active exploitation. Mitigation focus: Upgrade ISC BIND to 9.9.9-P4, 9.10.4-P4, 9.11.0-P1, or later.; Apply vendor backported packages from your operating system or appliance vendor.; Prioritize recursive DNS servers that are reachable by untrusted clients..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.