CVE-2016-9147: named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of...

Security readout for executives and security teams

CVE-2016-9147 is a denial-of-service issue in ISC BIND named. A remote attacker could trigger an assertion failure and make the DNS daemon exit using a DNS response with inconsistent DNSSEC-related records. The main business risk is DNS outage, not data theft or code execution based on the provided sources. Exposure is most likely on systems running the named daemon from the listed BIND versions, especially recursive or authoritative DNS infrastructure processing DNSSEC-related responses. Packaged BIND deployments from affected operating system vendors should be checked against their advisories. Treat as a DNS availability risk. Prioritize remediation for production DNS servers, especially internet-facing or business-critical resolvers, because a crash can interrupt name resolution and dependent services. Mitigation focus: Inventory internet-facing and internal BIND named servers.; Compare installed BIND versions with the listed affected versions.; Review ISC and operating system vendor advisories for fixed packages..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.