CVE-2016-2776
Fixed in a distro release EPSS 89%
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Products: oracle linux, oracle vm_server, isc bind, hp-ux, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | bind | 9.10.4_p3 |
| Alpine 3.3 | bind | 9.10.4_p3-r0 |
| Arch Linux | bind | 9.10.4.P3-1 |
| Debian 12 | bind9 | 1:9.10.3.dfsg.P4-11 |
| Debian 13 | bind9 | 1:9.10.3.dfsg.P4-11 |
| Debian 14 | bind9 | 1:9.10.3.dfsg.P4-11 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u11 |
| Debian 8 | bind9 | 1:9.9.5.dfsg-9+deb8u7 |
| Red Hat Enterprise Linux 5 | bind | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-chroot | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-debuginfo | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-devel | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-libbind-devel | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-libs | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-sdb | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind-utils | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 5 | bind97 | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | bind97-chroot | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | bind97-debuginfo | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | bind97-devel | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | bind97-libs | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | bind97-utils | 32:9.7.0-21.P2.el5_11.7 |
| Red Hat Enterprise Linux 5 | caching-nameserver | 30:9.3.6-25.P1.el5_11.9 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.47.rc1.el6_8.1 |
| Red Hat Enterprise Linux 7 | bind | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-chroot | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-debuginfo | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-devel | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-libs | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-libs-lite | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-license | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-lite-devel | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-pkcs11 | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-devel | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-libs | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-utils | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-sdb | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-sdb-chroot | 32:9.9.4-29.el7_2.4 |
| Red Hat Enterprise Linux 7 | bind-utils | 32:9.9.4-29.el7_2.4 |
| Red Hat rhel aus 6.4 | bind | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-chroot | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-devel | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-libs | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-sdb | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.4 | bind-utils | 32:9.8.2-0.17.rc1.el6_4.9 |
| Red Hat rhel aus 6.5 | bind | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-chroot | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-debuginfo | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-devel | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-libs | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-sdb | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel aus 6.5 | bind-utils | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel eus 6.6 | bind | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-chroot | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-debuginfo | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-devel | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-libs | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-sdb | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.6 | bind-utils | 32:9.8.2-0.30.rc1.el6_6.6 |
| Red Hat rhel eus 6.7 | bind | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-chroot | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-debuginfo | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-devel | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-libs | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-sdb | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel eus 6.7 | bind-utils | 32:9.8.2-0.37.rc1.el6_7.8 |
| Red Hat rhel mission critical 6.2 | bind | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-chroot | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-debuginfo | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-devel | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-libs | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-sdb | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel mission critical 6.2 | bind-utils | 32:9.7.3-8.P3.el6_2.5 |
| Red Hat rhel tus 6.5 | bind | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-chroot | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-debuginfo | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-devel | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-libs | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-sdb | 32:9.8.2-0.23.rc1.el6_5.4 |
| Red Hat rhel tus 6.5 | bind-utils | 32:9.8.2-0.23.rc1.el6_5.4 |
| SUSE Linux Enterprise Desktop 12 SP1 | bind | 9.9.9P1-46.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server 11 SP4 | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server 12 SP1 | bind | 9.9.9P1-46.1 |
| SUSE Linux Enterprise Server 12-LTSS | bind | 9.9.9P1-28.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | bind | 9.9.9P1-28.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | bind | 9.9.9P1-46.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | bind | 9.9.6P1-0.30.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | bind | 9.9.9P1-46.1 |
| SUSE Manager 2.1 | bind | 9.9.6P1-0.30.1 |
| SUSE Manager Proxy 2.1 | bind | 9.9.6P1-0.30.1 |
| SUSE OpenStack Cloud 5 | bind | 9.9.6P1-0.30.1 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.9 |
| Ubuntu 16.04 LTS | bind9 | 1:9.10.3.dfsg.P4-8ubuntu1.1 |
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 |