CVE-2016-9444
High · 7.5CVSS
7.5
EPSS
18.3%
Published
Jan 12, 2017
CISA due date
—
The record
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.10 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.11 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.12 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.13 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.14 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.15 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.16 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.17 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.18 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.19 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.2 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.20 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.21 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.22 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.3 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.4 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.5 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.6 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.7 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.8 | bind | 0 | 9.10.4_p5-r0 |
| Alpine:v3.9 | bind | 0 | 9.10.4_p5-r0 |
| Chainguard | bind | 0 | 0 |
| Chainguard | bind-dev | 0 | 0 |
| Chainguard | bind-dnssec-root | 0 | 0 |
| Chainguard | bind-dnssec-tools | 0 | 0 |
| Chainguard | bind-doc | 0 | 0 |
| Chainguard | bind-libs | 0 | 0 |
| Chainguard | bind-plugins | 0 | 0 |
| Chainguard | bind-tools | 0 | 0 |
| Debian:11 | bind9 | 0 | 1:9.10.3.dfsg.P4-11 |
| Debian:12 | bind9 | 0 | 1:9.10.3.dfsg.P4-11 |
| Debian:13 | bind9 | 0 | 1:9.10.3.dfsg.P4-11 |
| Debian:7 | bind9 | 0 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u14 |
| Debian:8 | bind9 | 0 | 1:9.9.5.dfsg-9+deb8u9 |
| Mageia:5 | bind | 0 | 9.10.5.P3-1.mga5 |
| Red Hat:enterprise_linux:7::client | bind | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-debuginfo | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-libs-lite | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-license | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-lite-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-pkcs11 | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-pkcs11-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-pkcs11-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-pkcs11-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-sdb | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-sdb-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::client | bind-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-debuginfo | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-libs-lite | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-license | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-lite-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-pkcs11 | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-pkcs11-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-pkcs11-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-pkcs11-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-sdb | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-sdb-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | bind-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-debuginfo | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-libs-lite | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-license | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-lite-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-pkcs11 | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-pkcs11-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-pkcs11-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-pkcs11-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-sdb | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-sdb-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::server | bind-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-debuginfo | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-libs-lite | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-license | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-lite-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-pkcs11 | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-pkcs11-devel | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-pkcs11-libs | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-pkcs11-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-sdb | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-sdb-chroot | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | bind-utils | 0 | 32:9.9.4-38.el7_3.1 |
| Red Hat:rhel_eus:7.2::computenode | bind | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-chroot | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-debuginfo | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-libs | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-libs-lite | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-license | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-lite-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-pkcs11 | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-pkcs11-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-pkcs11-libs | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-pkcs11-utils | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-sdb | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-sdb-chroot | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::computenode | bind-utils | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-chroot | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-debuginfo | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-libs | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-libs-lite | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-license | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-lite-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-pkcs11 | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-pkcs11-devel | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-pkcs11-libs | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-pkcs11-utils | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-sdb | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-sdb-chroot | 0 | 32:9.9.4-29.el7_2.6 |
| Red Hat:rhel_eus:7.2::server | bind-utils | 0 | 32:9.9.4-29.el7_2.6 |
| SUSE:Linux Enterprise Desktop 12 SP1 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Point of Sale 11 SP3 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server 11 SP2-LTSS | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server 11 SP3-LTSS | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server 11 SP4 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server 12 SP1 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Server 12 SP2 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Server 12-LTSS | bind | 0 | 9.9.9P1-28.26.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | bind | 0 | 9.9.9P1-28.26.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | bind | 0 | 9.9.9P1-53.1 |
| SUSE:Manager 2.1 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:Manager Proxy 2.1 | bind | 0 | 9.9.6P1-0.36.1 |
| SUSE:OpenStack Cloud 5 | bind | 0 | 9.9.6P1-0.36.1 |
| Ubuntu:14.04:LTS | bind9 | 0 | 1:9.9.5.dfsg-3ubuntu0.11 |
| Ubuntu:16.04:LTS | bind9 | 0 | 1:9.10.3.dfsg.P4-8ubuntu1.4 |
| Wolfi | bind | 0 | 0 |
| Wolfi | bind-dev | 0 | 0 |
| Wolfi | bind-dnssec-root | 0 | 0 |
| Wolfi | bind-dnssec-tools | 0 | 0 |
| Wolfi | bind-doc | 0 | 0 |
| Wolfi | bind-libs | 0 | 0 |
| Wolfi | bind-plugins | 0 | 0 |
| Wolfi | bind-tools | 0 | 0 |
Related vulnerabilities
- CVE-2016-9131 named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before… Also affects bind
- CVE-2016-9147 named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to… Also affects bind
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind
- CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an… Also affects bind
- CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an… Also affects bind
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind