# MA-587.032016: MyCERT Advisory - ISC Releases Security Updates

**Date:** 12 Mar 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-587.032016  
**Advisory ID:** MA-587.032016

---

####
**1.0 Introduction**
The Internet Systems Consortium (ISC) has released updates that address three vulnerabilities in BIND. Users and administrators are encouraged to review ISC Knowledge Base Articles AA-01351, AA-01352, and AA-01353 and apply the necessary updates.
**2.0 Impact**
Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition.
**3.0 Affected Products**
The affected products of Bind is as listed below:
•    Bind 9.10.0 -> 9.10.3-P3
•    Bind 9.2.0 -> 9.8.8, 9.9.0->9.9.8-P3, 9.9.3-S1->9.9.8-S5, 9.10.0->9.10.3-P3
•    Bind 9.0.0 -> 9.8.8, 9.9.0 -> 9.9.8-P3, 9.9.3-S1 -> 9.9.8-S5, 9.10.0 -> 9.10.3-P3
**4.0 Recommendations**
MyCERT highly recommends users of these applications to upgrade to the latest version of the affected products:
4.1 Upgrade to the patched release most closely 
•    BIND 9 versions 9.10.3-P4
<https://www.isc.org/downloads/file/bind-9-10-3-p4/?version=tar-gz>
<https://www.isc.org/downloads/file/bind-9-10-3-p4/?version=win-32-bit>
<https://www.isc.org/downloads/file/bind-9-10-3-p4/?version=win-64-bit>
•    BIND 9 version 9.9.8-P4
<https://www.isc.org/downloads/file/bind-9-9-8-p4/?version=tar-gz>
<https://www.isc.org/downloads/file/bind-9-9-8-p4/?version=win-32-bit>
<https://www.isc.org/downloads/file/bind-9-9-8-p4/?version=win-64-bit>
•    BIND 9 version 9.9.8-S6
BIND 9 Supported Preview Edition is a feature preview version of BIND     provided exclusively to eligible ISC Support customers.
Note: For current information, on which versions are actively supported, please see <http://www.isc.org/downloads/>.
4.2 For more information, please refer ISC Knowledge Base Articles AA-01351, AA-01352, and AA-01353
•    CVE-2016-2088
<https://kb.isc.org/article/AA-01351>
•    CVE-2016-1285
<https://kb.isc.org/article/AA-01352>
•    CVE-2016-1286
<https://kb.isc.org/article/AA-01353>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#aecdd7cccbdc979797eecdd7cccbdcddcbcddbdcc7dad780c3d7) or [[email protected]](/cdn-cgi/l/email-protection#630e1a00061117230e1a000611174d0c11044d0e1a)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0     References**
•    ISC Releases Security Updates for BIND:
<https://www.us-cert.gov/ncas/current-activity/2016/03/09/ISC-Releases-Security-Updates-BIND>
•    ESB-2016.0651 - [Win][UNIX/Linux] BIND: Denial of service - Remote/unauthenticated:
<https://www.auscert.org.au/render.html?it=32246>
•    IT security news- ISC Releases Security Updates for BIND:
<http://www.itsecuritynews.info/2016/03/10/isc-releases-security-updates-for-bind/>