Cloudanix VulnDB

CVE-2016-9131

High · 7.5

CVSS

7.5

EPSS

40.6%

Published

Jan 12, 2017

CISA due date

—

Cloudanix analysis

Next patch cycle SSVC: Track

A flaw in older versions of widely used DNS software lets attackers send a specially crafted message that crashes the server, temporarily stopping name lookups and disrupting connected services until it is restarted or updated.

Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
Low
Impact
Denial Of Service
Component
Network Service
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

A remote attacker can trigger an assertion failure in the named daemon by sending a malformed DNS response to an RTYPE ANY query, causing the process to exit and denying service.

Why it matters to the business

DNS resolution services become unavailable until the daemon is restarted, interrupting network-dependent applications and potentially causing widespread operational outages in environments that rely on the affected DNS software.

How an attack unfolds

An attacker identifies a vulnerable ISC BIND server and sends a crafted response packet for an RTYPE ANY query; the server performs insufficient validation, hits an assertion, and terminates, resulting in a denial of service. No known threat actors or ransomware campaigns have been associated with this issue.

How to fix it

Upgrade ISC BIND to version 9.9.9-P5 or later for the 9.9 branch, 9.10.4-P5 or later for the 9.10 branch, and 9.11.0-P2 or later for the 9.11 branch. Apply vendor patches for affected distributions of Debian, Red Hat Enterprise Linux, and NetApp products as they become available.

How to confirm the fix worked

Confirm the installed BIND version is at or above the minimum patched release, review release notes for the fix, and test that an RTYPE ANY query does not cause a crash under controlled conditions.

Typical attack path

  1. Scan for publicly reachable DNS servers running vulnerable ISC BIND versions
  2. Craft and transmit a malformed response to an RTYPE ANY query
  3. Observe assertion failure and daemon crash, confirming service disruption

How to detect it

Review BIND daemon logs for assertion failure messages referencing RTYPE ANY handling or unexpected exits; correlate with network traffic containing unusual ANY query responses around the time of crashes.

What your security team should do

  • Prioritize patching all internet-facing and internal authoritative/recursive DNS servers running affected BIND versions
  • Implement network segmentation and query filtering to limit exposure of DNS infrastructure until upgrades are complete
  • Monitor vendor advisories for downstream packages in Debian, Red Hat, and NetApp ecosystems

The record

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Affected packages

Ecosystem Package Introduced Fixed
Alpine:v3.10 bind 0 9.10.4_p5-r0
Alpine:v3.11 bind 0 9.10.4_p5-r0
Alpine:v3.12 bind 0 9.10.4_p5-r0
Alpine:v3.13 bind 0 9.10.4_p5-r0
Alpine:v3.14 bind 0 9.10.4_p5-r0
Alpine:v3.15 bind 0 9.10.4_p5-r0
Alpine:v3.16 bind 0 9.10.4_p5-r0
Alpine:v3.17 bind 0 9.10.4_p5-r0
Alpine:v3.18 bind 0 9.10.4_p5-r0
Alpine:v3.19 bind 0 9.10.4_p5-r0
Alpine:v3.2 bind 0 9.10.4_p5-r0
Alpine:v3.20 bind 0 9.10.4_p5-r0
Alpine:v3.21 bind 0 9.10.4_p5-r0
Alpine:v3.22 bind 0 9.10.4_p5-r0
Alpine:v3.3 bind 0 9.10.4_p5-r0
Alpine:v3.4 bind 0 9.10.4_p5-r0
Alpine:v3.5 bind 0 9.10.4_p5-r0
Alpine:v3.6 bind 0 9.10.4_p5-r0
Alpine:v3.7 bind 0 9.10.4_p5-r0
Alpine:v3.8 bind 0 9.10.4_p5-r0
Alpine:v3.9 bind 0 9.10.4_p5-r0
Chainguard bind 0 0
Chainguard bind-dev 0 0
Chainguard bind-dnssec-root 0 0
Chainguard bind-dnssec-tools 0 0
Chainguard bind-doc 0 0
Chainguard bind-libs 0 0
Chainguard bind-plugins 0 0
Chainguard bind-tools 0 0
Debian:11 bind9 0 1:9.10.3.dfsg.P4-11
Debian:12 bind9 0 1:9.10.3.dfsg.P4-11
Debian:13 bind9 0 1:9.10.3.dfsg.P4-11
Debian:14 bind9 0 1:9.10.3.dfsg.P4-11
Debian:7 bind9 0 1:9.8.4.dfsg.P1-6+nmu2+deb7u14
Debian:8 bind9 0 1:9.9.5.dfsg-9+deb8u9
Mageia:5 bind 0 9.10.5.P3-1.mga5
Red Hat:enterprise_linux:7::client bind 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-debuginfo 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-libs-lite 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-license 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-lite-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-pkcs11 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-pkcs11-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-pkcs11-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-pkcs11-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-sdb 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-sdb-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::client bind-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-debuginfo 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-libs-lite 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-license 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-lite-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-pkcs11 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-pkcs11-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-pkcs11-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-pkcs11-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-sdb 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-sdb-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::computenode bind-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-debuginfo 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-libs-lite 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-license 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-lite-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-pkcs11 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-pkcs11-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-pkcs11-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-pkcs11-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-sdb 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-sdb-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::server bind-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-debuginfo 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-libs-lite 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-license 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-lite-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-pkcs11 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-pkcs11-devel 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-pkcs11-libs 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-pkcs11-utils 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-sdb 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-sdb-chroot 0 32:9.9.4-38.el7_3.1
Red Hat:enterprise_linux:7::workstation bind-utils 0 32:9.9.4-38.el7_3.1
Red Hat:rhel_eus:7.2::computenode bind 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-chroot 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-debuginfo 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-libs 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-libs-lite 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-license 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-lite-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-pkcs11 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-pkcs11-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-pkcs11-libs 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-pkcs11-utils 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-sdb 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-sdb-chroot 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::computenode bind-utils 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-chroot 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-debuginfo 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-libs 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-libs-lite 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-license 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-lite-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-pkcs11 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-pkcs11-devel 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-pkcs11-libs 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-pkcs11-utils 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-sdb 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-sdb-chroot 0 32:9.9.4-29.el7_2.6
Red Hat:rhel_eus:7.2::server bind-utils 0 32:9.9.4-29.el7_2.6
SUSE:Linux Enterprise Desktop 12 SP1 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Desktop 12 SP2 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Point of Sale 11 SP3 bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server 11 SP2-LTSS bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server 11 SP3-LTSS bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server 11 SP3-TERADATA bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server 11 SP4 bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server 12 SP1 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Server 12 SP2 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Server 12-LTSS bind 0 9.9.9P1-28.26.1
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Server for SAP Applications 12 bind 0 9.9.9P1-28.26.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Software Development Kit 11 SP4 bind 0 9.9.6P1-0.36.1
SUSE:Linux Enterprise Software Development Kit 12 SP1 bind 0 9.9.9P1-53.1
SUSE:Linux Enterprise Software Development Kit 12 SP2 bind 0 9.9.9P1-53.1
SUSE:Manager 2.1 bind 0 9.9.6P1-0.36.1
SUSE:Manager Proxy 2.1 bind 0 9.9.6P1-0.36.1
SUSE:OpenStack Cloud 5 bind 0 9.9.6P1-0.36.1
Ubuntu:14.04:LTS bind9 0 1:9.9.5.dfsg-3ubuntu0.11
Ubuntu:16.04:LTS bind9 0 1:9.10.3.dfsg.P4-8ubuntu1.4
Wolfi bind 0 0
Wolfi bind-dev 0 0
Wolfi bind-dnssec-root 0 0
Wolfi bind-dnssec-tools 0 0
Wolfi bind-doc 0 0
Wolfi bind-libs 0 0
Wolfi bind-plugins 0 0
Wolfi bind-tools 0 0
openSUSE:Tumbleweed bind 0 9.16.20-1.4

Related vulnerabilities