← Back

CVE-2016-2776

nvd nist
Published: Sep 28, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Affected (49)

Products: Oracle: Linux, Vm Server, Solaris · Isc: Bind · Hp: Hp Ux
Oracle
3 products
Linux
Vm Server
Solaris
Isc
1 product
Bind
Hp
1 product
Hp Ux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Linux
Version 5.0
Linux
Version 6
Linux
Version 7
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Vm Server
Version 3.2
Vm Server
Version 3.3
Vm Server
Version 3.4
Configuration C
40 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Bind
Up to 9.9.9
Bind
Version 9.10.0
Bind
Version 9.10.0 a1
Bind
Version 9.10.0 a2
Bind
Version 9.10.0 b1
Bind
Version 9.10.0 b2
Bind
Version 9.10.0 p1
Bind
Version 9.10.0 p2
Bind
Version 9.10.0 rc1
Bind
Version 9.10.0 rc2
Bind
Version 9.10.1
Bind
Version 9.10.1 b1
Bind
Version 9.10.1 b2
Bind
Version 9.10.1 p1
Bind
Version 9.10.1 p2
Bind
Version 9.10.1 rc1
Bind
Version 9.10.1 rc2
Bind
Version 9.10.2 b1
Bind
Version 9.10.2 p1
Bind
Version 9.10.2 p2
Bind
Version 9.10.2 p3
Bind
Version 9.10.2 p4
Bind
Version 9.10.2 rc1
Bind
Version 9.10.2 rc2
Bind
Version 9.10.3
Bind
Version 9.10.3 b1
Bind
Version 9.10.3 p1
Bind
Version 9.10.3 p2
Bind
Version 9.10.3 p3
Bind
Version 9.10.3 p4
Bind
Version 9.10.3 rc1
Bind
Version 9.10.4 p2
Bind
Version 9.10.4 p3
Bind
Version 9.11.0 a1
Bind
Version 9.11.0 a2
Bind
Version 9.11.0 a3
Bind
Version 9.11.0 b1
Bind
Version 9.11.0 b2
Bind
Version 9.11.0 b3
Bind
Version 9.11.0 rc1
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Hp Ux
Version 11.31
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Solaris
Version 10.0
Solaris
Version 11.3

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.