Back to Database
Status published
High
CVE-2016-2776
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x...
Vulnerability Description
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-2776
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/93188
- https://kb.isc.org/article/AA-01438
- https://kb.isc.org/article/AA-01419/0
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
- http://rhn.redhat.com/errata/RHSA-2016-1944.html
- https://www.exploit-db.com/exploits/40453/
- https://security.gentoo.org/glsa/201610-07
- https://kb.isc.org/article/AA-01435
- http://rhn.redhat.com/errata/RHSA-2016-2099.html
- https://security.netapp.com/advisory/ntap-20160930-0001/
- http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html
- http://www.securitytracker.com/id/1036903
- http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:28.bind.asc
- http://rhn.redhat.com/errata/RHSA-2016-1945.html
- https://kb.isc.org/article/AA-01436
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107
More from oracle
View All →CVE-2021-3314
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A...
Medium
6.1
CVE-2020-9315
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web...
High
7.5
CVE-2020-9314
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web...
Medium
4.8
CVE-2019-2413
Vulnerability in the Oracle Reports Developer component of Oracle Fusion...
Medium
6.1
CVE-2018-3209
Vulnerability in the Java SE component of Oracle Java SE...
High
8.3
Affected Vendor
oracle
View all reports →Affected Software
linux, vm server, bind, hp-ux, solaris
Vulnerable Versions:
5.0, 6, 7, 3.2, 3.3, 3.4, 0, 9.10.0, 9.10.1, 9.10.2, 9.10.3, 9.10.4, 9.11.0, 11.31, 10.0, 11.3
Timeline
Official Publish:
September 28th, 2016
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.