CVE-2016-6170

medium · 6.5

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.

6.5

CVSS

40.9%

EPSS (exploit prob.)

99th

EPSS percentile

2016-07-06

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
isc	bind	>= 9.0, <= 9.9.8
isc	bind	>= 9.10.0, <= 9.10.3
isc	bind	9.9.9
isc	bind	9.9.9
isc	bind	9.9.9
isc	bind	9.9.9
isc	bind	9.10.4
isc	bind	9.10.4
isc	bind	9.11.0
isc	bind	9.11.0
isc	bind	9.11.0
isc	bind	9.11.0
redhat	enterprise_linux	5.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-6170