CVE-2016-9131 named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed res...
HighCVSS 7.5
EPSS 40.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bind9(Debian:12) | < 1:9.10.3.dfsg.P4-11 | 1:9.10.3.dfsg.P4-11 |
| debian/bind9(Debian:13) | < 1:9.10.3.dfsg.P4-11 | 1:9.10.3.dfsg.P4-11 |
| debian/bind9(Debian:14) | < 1:9.10.3.dfsg.P4-11 | 1:9.10.3.dfsg.P4-11 |
| isc bind | >= 9.0, <= 9.9.8 | No fix listed |
| isc bind | >= 9.10.0, <= 9.10.3 | No fix listed |
| isc bind | = 9.9.9 | No fix listed |
| isc bind | = 9.9.9-b1 | No fix listed |
| isc bind | = 9.9.9-b2 | No fix listed |
| isc bind | = 9.9.9-p1 | No fix listed |
| isc bind | = 9.9.9-p3 | No fix listed |
| isc bind | = 9.9.9-p4 | No fix listed |
| isc bind | = 9.10.4-b2 | No fix listed |
| isc bind | = 9.10.4-b3 | No fix listed |
| isc bind | = 9.10.4-p2 | No fix listed |
| isc bind | = 9.10.4-p3 | No fix listed |
| isc bind | = 9.10.4-p4 | No fix listed |
| isc bind | = 9.10.4-rc1 | No fix listed |
| isc bind | = 9.11.0-a1 | No fix listed |
| isc bind | = 9.11.0-a2 | No fix listed |
| isc bind | = 9.11.0-a3 | No fix listed |
| isc bind | = 9.11.0-b1 | No fix listed |
| isc bind | = 9.11.0-b2 | No fix listed |
| isc bind | = 9.11.0-b3 | No fix listed |
| isc bind | = 9.11.0-p1 | No fix listed |
| isc bind | = 9.11.0-rc1 | No fix listed |
Show 46 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 8.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 7.2 | No fix listed |
| redhat enterprise linux eus | = 7.3 | No fix listed |
| redhat enterprise linux eus | = 7.4 | No fix listed |
| redhat enterprise linux eus | = 7.5 | No fix listed |
| redhat enterprise linux eus | = 7.6 | No fix listed |
| redhat enterprise linux eus | = 7.7 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.2 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server aus | = 7.7 | No fix listed |
| redhat enterprise linux server tus | = 7.2 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.7 | No fix listed |
| redhat enterprise linux server workstation | = 7.0 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp hci management node | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| netapp steelstore cloud integrated storage | All versions | No fix listed |
| alpine/bind(Alpine:v3.10) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.11) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.12) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.13) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.14) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.15) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.16) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.17) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.18) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.19) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.2) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.20) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.21) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.22) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.23) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.24) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.3) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.4) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.5) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.6) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.7) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.8) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
| alpine/bind(Alpine:v3.9) | >= 9.0, < 9.10.4_p5-r0 | 9.10.4_p5-r0 |
References
- Debian Security Tracker CVE-2016-9131 vendor-advisory
- RHSA-2017:0062 third-party-advisory vendor-advisory
- DSA-3758 third-party-advisory vendor-advisory
- 95386 third-party-advisory vdb-entry
- 1037582 third-party-advisory vdb-entry
- RHSA-2017:1583 third-party-advisory vendor-advisory
- h20566.www2.hpe.com patch third-party-advisory
- kb.isc.org patch vendor-advisory
- GLSA-201708-01 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking