CVE-2016-2775

Published: Jul 19, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

Affected (42)

Products: Hp: Hp Ux · Isc: Bind · Fedoraproject: Fedora · +1 more

Show all products

Hp: Hp Ux · Isc: Bind · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation

1 product

1 product

1 product

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp Hp Ux	Version b.11.31

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.0 to 9.9.8
Isc Bind	From 9.10.0 to 9.10.3
Isc Bind	Version 9.10.4
Isc Bind	Version 9.10.4 beta1
Isc Bind	Version 9.10.4 beta2
Isc Bind	Version 9.10.4 beta3
Isc Bind	Version 9.10.4 p1
Isc Bind	Version 9.11.0
Isc Bind	Version 9.11.0 alpha1
Isc Bind	Version 9.11.0 alpha2
Isc Bind	Version 9.11.0 alpha3
Isc Bind	Version 9.11.0 beta1
Isc Bind	Version 9.9.9
Isc Bind	Version 9.9.9 b1
Isc Bind	Version 9.9.9 b2
Isc Bind	Version 9.9.9 p1
Isc Bind	Version 9.9.9 rc1
Isc Bind	Version 9.9.9 s1
Isc Bind	Version 9.9.9 s1rc1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23
Fedoraproject Fedora	Version 24

Configuration D

20 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.2
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://www.securityfocus.com/bid/92037

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036360

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHBA-2017:0651

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHBA-2017:1767

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2533

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107

Source: cve@mitre.org

PatchVendor Advisory

https://kb.isc.org/article/AA-01393/74/CVE-2016-2775

Source: cve@mitre.org

PatchVendor Advisory

https://kb.isc.org/article/AA-01435

Source: cve@mitre.org

Broken Link

https://kb.isc.org/article/AA-01436

Source: cve@mitre.org

Broken Link

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/

Source: cve@mitre.org

https://security.gentoo.org/glsa/201610-07

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160722-0002/

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/92037

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036360

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHBA-2017:0651

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHBA-2017:1767

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2533

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://kb.isc.org/article/AA-01393/74/CVE-2016-2775

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://kb.isc.org/article/AA-01435

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://kb.isc.org/article/AA-01436

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://kb.isc.org/article/AA-01438

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201610-07

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160722-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.