CVE-2016-2775: Input Validation
First published: Tue Jul 19 2016(Updated: )
ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/bind | <9.9.9 | 9.9.9 |
| redhat/bind | <9.10.4 | 9.10.4 |
| redhat/bind | <9.11.0 | 9.11.0 |
| HPE HP-UX | =b.11.31 | |
| ISC BIND | >=9.0<=9.9.8 | |
| ISC BIND | >=9.10.0<=9.10.3 | |
| ISC BIND | =9.9.9 | |
| ISC BIND | =9.9.9-b1 | |
| ISC BIND | =9.9.9-b2 | |
| ISC BIND | =9.9.9-p1 | |
| ISC BIND | =9.9.9-rc1 | |
| ISC BIND | =9.9.9-s1 | |
| ISC BIND | =9.9.9-s1rc1 | |
| ISC BIND | =9.10.4 | |
| ISC BIND | =9.10.4-beta1 | |
| ISC BIND | =9.10.4-beta2 | |
| ISC BIND | =9.10.4-beta3 | |
| ISC BIND | =9.10.4-p1 | |
| ISC BIND | =9.11.0 | |
| ISC BIND | =9.11.0-alpha1 | |
| ISC BIND | =9.11.0-alpha2 | |
| ISC BIND | =9.11.0-alpha3 | |
| ISC BIND | =9.11.0-beta1 | |
| Fedoraproject Fedora | =23 | |
| Fedoraproject Fedora | =24 | |
| Redhat Enterprise Linux Desktop | =6.0 | |
| Redhat Enterprise Linux Desktop | =7.0 | |
| Redhat Enterprise Linux Eus | =7.2 | |
| Redhat Enterprise Linux Eus | =7.3 | |
| Redhat Enterprise Linux Eus | =7.4 | |
| Redhat Enterprise Linux Eus | =7.5 | |
| Redhat Enterprise Linux Eus | =7.6 | |
| Redhat Enterprise Linux Eus | =7.7 | |
| Red Hat Enterprise Linux Server | =6.0 | |
| Red Hat Enterprise Linux Server | =7.0 | |
| Red Hat Enterprise Linux Server | =7.2 | |
| Red Hat Enterprise Linux Server | =7.3 | |
| Red Hat Enterprise Linux Server | =7.6 | |
| Red Hat Enterprise Linux Server | =7.7 | |
| Red Hat Enterprise Linux Server | =7.2 | |
| Red Hat Enterprise Linux Server | =7.3 | |
| Red Hat Enterprise Linux Server | =7.6 | |
| Red Hat Enterprise Linux Server | =7.7 | |
| Redhat Enterprise Linux Workstation | =6.0 | |
| Redhat Enterprise Linux Workstation | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/92037
- http://www.securitytracker.com/id/1036360
- https://access.redhat.com/errata/RHBA-2017:0651
- https://access.redhat.com/errata/RHBA-2017:1767
- https://access.redhat.com/errata/RHSA-2017:2533
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107
- https://kb.isc.org/article/AA-01393/74/CVE-2016-2775
- https://kb.isc.org/article/AA-01435
- https://kb.isc.org/article/AA-01436
- https://kb.isc.org/article/AA-01438
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/
- https://security.gentoo.org/glsa/201610-07
- https://security.netapp.com/advisory/ntap-20160722-0002/
- https://kb.isc.org/article/AA-01393/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1357804
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1357805
- https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=38cc2d14e218e536e0102fa70deef99461354232
- https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=429701008e672edc50d33c83d983ba096fee5f13
- https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=909d442cc0bed4337760419fa135c98224a79c73
- https://access.redhat.com/security/cve/cve-2016-2775
- https://bugzilla.redhat.com/show_bug.cgi?id=1357803
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/
- agent/type
- agent/remedy
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-2775
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/hp
- canonical/hpe hp-ux
- version/hpe hp-ux/b.11.31
- vendor/isc
- canonical/isc bind
- version/isc bind/9.0
- version/isc bind/9.9.8
- version/isc bind/9.10.0
- version/isc bind/9.10.3
- version/isc bind/9.9.9
- version/isc bind/9.9.9-b1
- version/isc bind/9.9.9-b2
- version/isc bind/9.9.9-p1
- version/isc bind/9.9.9-rc1
- version/isc bind/9.9.9-s1
- version/isc bind/9.9.9-s1rc1
- version/isc bind/9.10.4
- version/isc bind/9.10.4-beta1
- version/isc bind/9.10.4-beta2
- version/isc bind/9.10.4-beta3
- version/isc bind/9.10.4-p1
- version/isc bind/9.11.0
- version/isc bind/9.11.0-alpha1
- version/isc bind/9.11.0-alpha2
- version/isc bind/9.11.0-alpha3
- version/isc bind/9.11.0-beta1
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/23
- version/fedoraproject fedora/24
- vendor/redhat
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/6.0
- version/redhat enterprise linux desktop/7.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/7.2
- version/redhat enterprise linux eus/7.3
- version/redhat enterprise linux eus/7.4
- version/redhat enterprise linux eus/7.5
- version/redhat enterprise linux eus/7.6
- version/redhat enterprise linux eus/7.7
- canonical/red hat enterprise linux server
- version/red hat enterprise linux server/6.0
- version/red hat enterprise linux server/7.0
- version/red hat enterprise linux server/7.2
- version/red hat enterprise linux server/7.3
- version/red hat enterprise linux server/7.6
- version/red hat enterprise linux server/7.7
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/6.0
- version/redhat enterprise linux workstation/7.0