Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2016-9131
HistoryJan 12, 2017 - 6:59 a.m.

CVE-2016-9131

2017-01-1206:59:00
CWE-20
mitre
web.nvd.nist.gov
406
cve-2016-9131
isc bind
denial of service
assertion failure
remote attack
rtype any query

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.873

Percentile

98.6%

JSON

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Affected configurations

Nvd
Node
iscbindRange9.0–9.9.8
OR
iscbindRange9.10.0–9.10.3
OR
iscbindMatch9.9.9-
OR
iscbindMatch9.9.9b1
OR
iscbindMatch9.9.9b2
OR
iscbindMatch9.9.9p1
OR
iscbindMatch9.9.9p3
OR
iscbindMatch9.9.9p4
OR
iscbindMatch9.10.4b2
OR
iscbindMatch9.10.4b3
OR
iscbindMatch9.10.4p2
OR
iscbindMatch9.10.4p3
OR
iscbindMatch9.10.4p4
OR
iscbindMatch9.10.4rc1
OR
iscbindMatch9.11.0a1
OR
iscbindMatch9.11.0a2
OR
iscbindMatch9.11.0a3
OR
iscbindMatch9.11.0b1
OR
iscbindMatch9.11.0b2
OR
iscbindMatch9.11.0b3
OR
iscbindMatch9.11.0p1
OR
iscbindMatch9.11.0rc1
Node
debiandebian_linuxMatch8.0
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_eusMatch7.2
OR
redhatenterprise_linux_eusMatch7.3
OR
redhatenterprise_linux_eusMatch7.4
OR
redhatenterprise_linux_eusMatch7.5
OR
redhatenterprise_linux_eusMatch7.6
OR
redhatenterprise_linux_eusMatch7.7
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.2
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_ausMatch7.7
OR
redhatenterprise_linux_server_tusMatch7.2
OR
redhatenterprise_linux_server_tusMatch7.3
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.7
OR
redhatenterprise_linux_server_workstationMatch7.0
Node
netappdata_ontap_edgeMatch-
OR
netapphci_management_nodeMatch-
OR
netappsolidfireMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
VendorProductVersionCPE
iscbind*cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*
iscbind9.9.9cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*
iscbind9.10.4cpe:2.3:a:isc:bind:9.10.4:b2:*:*:*:*:*:*
iscbind9.10.4cpe:2.3:a:isc:bind:9.10.4:b3:*:*:*:*:*:*
iscbind9.10.4cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*
Rows per page:
1-10 of 441

Related

cvelist 1
f5 1
aix 1
checkpoint_advisories 1
osv 7
nessus 32
prion 1
openvas 22
redhatcve 1
debiancve 1
nvd 1
ubuntucve 1
alpinelinux 1
debian 2
ibm 4
redhat 2
fedora 4
centos 1
suse 5
cloudfoundry 1
ubuntu 1
freebsd 1
archlinux 1
oraclelinux 1
mageia 1
gentoo 1
kitploit 1
cvelist
cvelist
CVE-2016-9131
2017-01-12 06:06:00
f5
f5
K86272821 : BIND vulnerability CVE-2016-9131
2017-01-13 00:00:00
aix
aix
There is a vulnerability in BIND that impacts AIX.
2017-03-07 15:49:49
checkpoint_advisories
checkpoint_advisories
ISC BIND TKEY Query Response Assertion Failure Denial of Service (CVE-2016-9131)
2017-01-22 00:00:00
osv
osv
CVE-2016-9131
2017-01-12 06:59:00
CGA-g9xq-xfgr-hc55
2024-06-06 12:27:25
Red Hat Security Advisory: bind security update
2024-09-15 23:56:09
nessus
nessus
AIX 7.2 TL 0 : bind (IV93403) (deprecated)
2017-03-08 00:00:00
AIX 5.3 TL 12 : bind (IV93366) (deprecated)
2017-03-08 00:00:00
AIX 7.1 TL 4 : bind (IV93363) (deprecated)
2017-03-08 00:00:00
prion
prion
Design/Logic Flaw
2017-01-12 06:59:00
openvas
openvas
ISC BIND RTYPE ANY Query Denial of Service Vulnerability - Windows
2017-01-16 00:00:00
ISC BIND RTYPE ANY Query Denial of Service Vulnerability - Linux
2017-01-16 00:00:00
Debian: Security Advisory (DLA-805-1)
2023-03-08 00:00:00
redhatcve
redhatcve
CVE-2016-9131
2017-01-12 05:18:50
debiancve
debiancve
CVE-2016-9131
2017-01-12 06:59:00
nvd
nvd
CVE-2016-9131
2017-01-12 06:59:00
ubuntucve
ubuntucve
CVE-2016-9131
2017-01-11 00:00:00
alpinelinux
alpinelinux
CVE-2016-9131
2017-01-12 06:59:00
debian
debian
[SECURITY] [DSA 3758-1] bind9 security update
2017-01-11 22:15:08
[SECURITY] [DLA 805-1] bind9 security update
2017-01-29 11:36:52
ibm
ibm
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in bind (CVE-2016-9131 CVE-2016-9147 CVE-2016-9444)
2019-01-31 02:25:02
Security Bulletin: Vulnerabilities in ISC Bind affect PowerKVM
2018-06-18 01:34:53
Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2016-9131, CVE-2016-9444, CVE-2016-9147, CVE-2016-9778 and CVE-2017-3135)
2019-12-18 14:26:38
redhat
redhat
(RHSA-2017:0062) Important: bind security update
2017-01-16 04:08:31
(RHSA-2017:1583) Important: bind security and bug fix update
2017-06-28 08:01:41
fedora
fedora
[SECURITY] Fedora 24 Update: bind99-9.9.9-4.P5.fc24
2017-01-16 20:52:08
[SECURITY] Fedora 25 Update: bind99-9.9.9-4.P5.fc25
2017-01-14 03:54:33
[SECURITY] Fedora 25 Update: bind-9.10.4-3.P5.fc25
2017-01-14 03:54:31
centos
centos
bind security update
2017-01-17 13:12:56
suse
suse
Security update for bind (important)
2017-01-18 12:09:00
Security update for bind (important)
2017-01-12 02:10:52
Security update for bind (important)
2017-01-12 02:08:43
cloudfoundry
cloudfoundry
USN-3172-1: Bind vulnerabilities | Cloud Foundry
2017-01-31 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2017-01-12 00:00:00
freebsd
freebsd
BIND -- multiple vulnerabilities
2017-01-11 00:00:00
archlinux
archlinux
[ASA-201701-15] bind: denial of service
2017-01-12 00:00:00
oraclelinux
oraclelinux
bind security update
2017-01-16 00:00:00
mageia
mageia
Updated bind packages fix security vulnerability
2017-12-31 15:00:06
gentoo
gentoo
BIND: Multiple vulnerabilities
2017-08-17 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.873

Percentile

98.6%

JSON
Related for CVE-2016-9131
cvelist1f51aix1checkpoint_advisories1osv7nessus32prion1openvas22redhatcve1debiancve1nvd1ubuntucve1alpinelinux1debian2ibm4redhat2fedora4centos1suse5cloudfoundry1ubuntu1freebsd1archlinux1oraclelinux1mageia1gentoo1kitploit1