9.8.9

DATE	CVE	VULNERABILITY TITLE	RISK
2016-03-09	CVE-2016-1286	named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c. network low complexity isc suse opensuse fedoraproject canonical debian juniper	8.6
2016-03-09	CVE-2016-1285	named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c. network high complexity isc suse opensuse fedoraproject canonical debian juniper	6.8