CVE-2016-6170
Medium · 6.5CVSS
6.5
EPSS
40.9%
Published
Jul 6, 2016
CISA due date
—
The record
ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | bind9 | 0 | 1:9.10.6+dfsg-1 |
| Debian:11 | bind9 | 0 | 1:9.10.6+dfsg-1 |
| Debian:12 | bind9 | 0 | 1:9.10.6+dfsg-1 |
| Debian:13 | bind9 | 0 | 1:9.10.6+dfsg-1 |
| Debian:14 | bind9 | 0 | 1:9.10.6+dfsg-1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Point of Sale 11 SP3 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Server 11 SP3-LTSS | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Server 11 SP4 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Server 12 SP1 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Server 12 SP2 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Server 12-LTSS | bind | 0 | 9.9.9P1-28.34.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | bind | 0 | 9.9.9P1-28.34.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | bind | 0 | 9.9.9P1-59.1 |
| SUSE:Manager 2.1 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:Manager Proxy 2.1 | bind | 0 | 9.9.6P1-0.44.1 |
| SUSE:OpenStack Cloud 5 | bind | 0 | 9.9.6P1-0.44.1 |
| Ubuntu:18.04:LTS | bind9 | 0 | 1:9.11.2.P1-1ubuntu3 |
| Ubuntu:Pro:14.04:LTS | bind9 | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | bind9 | 0 | 1:9.9.5.dfsg-3ubuntu0.19+esm9 |
| Ubuntu:Pro:16.04:LTS | bind9 | 0 | 1:9.10.3.dfsg.P4-8ubuntu1.19+esm5 |
Related vulnerabilities
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind9
- CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an… Also affects bind9
- CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an… Also affects bind9
- CVE-2015-1349 named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when… Also affects bind9
- CVE-2012-1033 The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values… Also affects bind9
- CVE-2011-4313 query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through… Also affects bind9
- CVE-2011-2464 Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before… Also affects bind9