NetSight
IP …
high7.5Public exploit code

CVE-2016-2776

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remot…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Affected products

VendorProductAffected versions
OracleLinux
Versions 5.0, 6, 7
OracleVm Server
Versions 3.2, 3.3, 3.4
IscBind
through 9.9.9
Versions 9.10.0, 9.10.1, 9.10.2, 9.10.3, 9.10.4
HpHp-Ux
Version 11.31
OracleSolaris
Versions 10.0, 11.3

Weakness classification

CWE-20

References