title: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
description: An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
problem types: An assertion check in BIND (that is meant to prevent going beyond the end of a buffer when processing incoming data) can be incorrectly triggered by a large response during zone transfer.  Versions affected: BIND 9.16.0 -> 9.16.3
affected:
{
product: BIND9
vendor: ISC
versions:
status: affected, version: 9.16.0 -> 9.16.3
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
solutions: Upgrade to the patched release most closely related to your current version of BIND:
BIND 9.16.4
workarounds: None