CVE-2016-9147

Published: Jan 12, 2017Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.

Affected (4)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.10.4 p4
Isc Bind	Version 9.11.0 p1
Isc Bind	Version 9.9.9 p4
Isc Bind	Version 9.9.9 s6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

http://rhn.redhat.com/errata/RHSA-2017-0062.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0063.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0064.html

Source: cve@mitre.org

http://www.debian.org/security/2017/dsa-3758

Source: cve@mitre.org

http://www.securityfocus.com/bid/95390

Source: cve@mitre.org

http://www.securitytracker.com/id/1037582

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:1582

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:1583

Source: cve@mitre.org

https://kb.isc.org/article/AA-01440/74/CVE-2016-9147

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201708-01

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20180926-0005/

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0062.html