Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-2776
HistorySep 28, 2016 - 10:59 a.m.

CVE-2016-2776

2016-09-2810:59:00
CWE-20
[email protected]
web.nvd.nist.gov
9

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.972

Percentile

99.9%

JSON

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Affected configurations

Nvd
Node
oraclelinuxMatch5.0
OR
oraclelinuxMatch6
OR
oraclelinuxMatch7
Node
oraclevm_serverMatch3.2
OR
oraclevm_serverMatch3.3
OR
oraclevm_serverMatch3.4
Node
iscbindRange≤9.9.9p3
OR
iscbindMatch9.10.0
OR
iscbindMatch9.10.0a1
OR
iscbindMatch9.10.0a2
OR
iscbindMatch9.10.0b1
OR
iscbindMatch9.10.0b2
OR
iscbindMatch9.10.0p1
OR
iscbindMatch9.10.0p2
OR
iscbindMatch9.10.0rc1
OR
iscbindMatch9.10.0rc2
OR
iscbindMatch9.10.1
OR
iscbindMatch9.10.1b1
OR
iscbindMatch9.10.1b2
OR
iscbindMatch9.10.1p1
OR
iscbindMatch9.10.1p2
OR
iscbindMatch9.10.1rc1
OR
iscbindMatch9.10.1rc2
OR
iscbindMatch9.10.2b1
OR
iscbindMatch9.10.2p1
OR
iscbindMatch9.10.2p2
OR
iscbindMatch9.10.2p3
OR
iscbindMatch9.10.2p4
OR
iscbindMatch9.10.2rc1
OR
iscbindMatch9.10.2rc2
OR
iscbindMatch9.10.3
OR
iscbindMatch9.10.3b1
OR
iscbindMatch9.10.3p1
OR
iscbindMatch9.10.3p2
OR
iscbindMatch9.10.3p3
OR
iscbindMatch9.10.3p4
OR
iscbindMatch9.10.3rc1
OR
iscbindMatch9.10.4p2
OR
iscbindMatch9.10.4p3
OR
iscbindMatch9.11.0a1
OR
iscbindMatch9.11.0a2
OR
iscbindMatch9.11.0a3
OR
iscbindMatch9.11.0b1
OR
iscbindMatch9.11.0b2
OR
iscbindMatch9.11.0b3
OR
iscbindMatch9.11.0rc1
Node
hphp-uxMatch11.31
Node
oraclesolarisMatch10.0
OR
oraclesolarisMatch11.3

Related

prion 1
nessus 43
openvas 29
archlinux 1
f5 2
debiancve 1
fedora 6
ubuntucve 1
metasploit 1
slackware 1
centos 2
suse 4
zdt 1
exploitpack 1
altlinux 5
osv 3
packetstorm 2
redhatcve 1
veracode 1
alpinelinux 1
redhat 3
cloudfoundry 1
freebsd 1
cve 1
freebsd_advisory 1
ubuntu 1
checkpoint_advisories 1
amazon 1
cvelist 1
exploitdb 1
aix 1
debian 2
mageia 1
ibm 3
threatpost 1
oraclelinux 5
gentoo 1
photon 1
prion
prion
Design/Logic Flaw
2016-09-28 10:59:00
nessus
nessus
OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0136)
2016-09-29 00:00:00
Photon OS 1.0: Bindutils PHSA-2017-0021
2019-02-07 00:00:00
CentOS 5 : bind97 (CESA-2016:1945)
2016-09-28 00:00:00
openvas
openvas
RedHat Update for bind97 RHSA-2016:1945-01
2016-10-05 00:00:00
CentOS Update for bind97 CESA-2016:1945 centos5
2016-09-29 00:00:00
Slackware: Security Advisory (SSA:2016-271-01)
2022-04-21 00:00:00
archlinux
archlinux
[ASA-201609-29] bind: denial of service
2016-09-27 00:00:00
f5
f5
K18829561 : BIND vulnerability CVE-2016-2776
2016-09-27 00:00:00
SOL18829561 - BIND vulnerability CVE-2016-2776
2016-09-27 00:00:00
debiancve
debiancve
CVE-2016-2776
2016-09-28 10:59:00
fedora
fedora
[SECURITY] Fedora 23 Update: bind-9.10.4-2.P3.fc23
2016-10-24 23:52:28
[SECURITY] Fedora 24 Update: bind99-9.9.9-2.P3.fc24
2016-10-03 17:23:31
[SECURITY] Fedora 24 Update: bind-9.10.4-2.P3.fc24
2016-10-01 00:53:36
ubuntucve
ubuntucve
CVE-2016-2776
2016-09-27 00:00:00
metasploit
metasploit
BIND TSIG Query Denial of Service
2017-08-26 15:41:10
slackware
slackware
[slackware-security] bind
2016-09-27 19:49:07
centos
centos
bind97 security update
2016-09-28 14:01:06
bind, caching security update
2016-09-28 14:00:32
suse
suse
Security update for bind (critical)
2016-09-28 11:09:52
Security update for bind (critical)
2016-09-27 21:10:55
Security update for bind (critical)
2016-09-27 22:09:45
zdt
zdt
Bind 9 DNS Server - Denial of Service Exploit
2016-10-04 00:00:00
exploitpack
exploitpack
ISC BIND 9 - Denial of Service
2016-10-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.9.8-alt4
2016-09-27 00:00:00
Security fix for the ALT Linux 8 package bind version 9.9.8-alt4
2016-09-27 00:00:00
Security fix for the ALT Linux 7 package bind version 9.9.8-alt2.M70P.2
2016-09-27 00:00:00
osv
osv
CVE-2016-2776
2016-09-28 10:59:00
bind9 - security update
2016-10-05 00:00:00
bind9 - security update
2016-09-27 00:00:00
packetstorm
packetstorm
BIND TSIG Query Denial of Service
2024-08-31 00:00:00
BIND 9 DNS Server Denial Of Service
2016-10-04 00:00:00
redhatcve
redhatcve
CVE-2016-2776
2020-04-09 09:15:08
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:13:15
alpinelinux
alpinelinux
CVE-2016-2776
2016-09-28 10:59:00
redhat
redhat
(RHSA-2016:1945) Important: bind97 security update
2016-09-28 00:00:00
(RHSA-2016:1944) Important: bind security update
2016-09-28 00:00:00
(RHSA-2016:2099) Important: bind security update
2016-10-25 07:38:10
cloudfoundry
cloudfoundry
USN-3088-1: Bind vulnerability | Cloud Foundry
2016-12-13 00:00:00
freebsd
freebsd
BIND -- Remote Denial of Service vulnerability
2016-09-27 00:00:00
cve
cve
CVE-2016-2776
2016-09-28 10:59:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:28.bind
2016-10-10 00:00:00
ubuntu
ubuntu
Bind vulnerability
2016-09-27 00:00:00
checkpoint_advisories
checkpoint_advisories
DNS Server Bind 9 Response Message Rendering Denial of Service (CVE-2016-2776)
2016-10-05 00:00:00
amazon
amazon
Important: bind
2016-09-28 15:45:00
cvelist
cvelist
CVE-2016-2776
2016-09-28 10:00:00
exploitdb
exploitdb
ISC BIND 9 - Denial of Service
2016-10-04 00:00:00
aix
aix
Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS
2016-11-18 08:19:36
debian
debian
[SECURITY] [DLA 645-1] bind9 security update
2016-10-05 17:44:33
[SECURITY] [DSA 3680-1] bind9 security update
2016-09-27 18:52:22
mageia
mageia
Updated bind packages fix security vulnerability
2016-10-04 15:20:54
ibm
ibm
Security Bulletin: Multiple vulnerabilities in BIND affects IBM Netezza Host Management
2019-10-18 03:10:29
Security Bulletin: Vulnerabilities in bind affect PowerKVM (CVE-2016-2776, CVE-2016-8864)
2018-06-18 01:33:47
Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2016-2775, CVE-2016-2776, CVE-2016-8864 and CVE-2016-6170)
2019-12-18 14:26:38
threatpost
threatpost
ISC Patches Critical Error Condition in BIND
2016-09-28 16:29:53
oraclelinux
oraclelinux
bind security update
2016-11-09 00:00:00
bind security update
2016-09-28 00:00:00
bind97 security update
2016-09-28 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2016-10-11 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0021
2017-06-22 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.972

Percentile

99.9%

JSON
Related for NVD:CVE-2016-2776
prion1nessus43openvas29archlinux1f52debiancve1fedora6ubuntucve1metasploit1slackware1centos2suse4zdt1exploitpack1altlinux5osv3packetstorm2redhatcve1veracode1alpinelinux1redhat3cloudfoundry1freebsd1cve1freebsd_advisory1ubuntu1checkpoint_advisories1amazon1cvelist1exploitdb1aix1debian2mageia1ibm3threatpost1oraclelinux5gentoo1photon1