CVE-2016-2775

Source
https://cve.org/CVERecord?id=CVE-2016-2775
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2775.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2775
Downstream
Related
Published
2016-07-19T22:59:00.147Z
Modified
2026-07-08T05:48:52.645824379Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

Database specific
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "23"
                },
                {
                    "last_affected": "23"
                },
                {
                    "introduced": "24"
                },
                {
                    "last_affected": "24"
                }
            ],
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora"
        },
        {
            "extracted_events": [
                {
                    "introduced": "b.11.31"
                },
                {
                    "last_affected": "b.11.31"
                }
            ],
            "cpes": [
                "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "hp:hp-ux"
        },
        {
            "extracted_events": [
                {
                    "introduced": "9.9.9-s1rc1"
                },
                {
                    "last_affected": "9.9.9-s1rc1"
                },
                {
                    "introduced": "9.9.9-s1rc1"
                },
                {
                    "last_affected": "9.9.9-s1rc1"
                },
                {
                    "introduced": "9.10.4-beta1"
                },
                {
                    "last_affected": "9.10.4-beta1"
                },
                {
                    "introduced": "9.10.4-beta1"
                },
                {
                    "last_affected": "9.10.4-beta1"
                },
                {
                    "introduced": "9.10.4-beta2"
                },
                {
                    "last_affected": "9.10.4-beta2"
                },
                {
                    "introduced": "9.10.4-beta2"
                },
                {
                    "last_affected": "9.10.4-beta2"
                },
                {
                    "introduced": "9.10.4-beta3"
                },
                {
                    "last_affected": "9.10.4-beta3"
                },
                {
                    "introduced": "9.10.4-beta3"
                },
                {
                    "last_affected": "9.10.4-beta3"
                },
                {
                    "introduced": "9.11.0-alpha1"
                },
                {
                    "last_affected": "9.11.0-alpha1"
                },
                {
                    "introduced": "9.11.0-alpha1"
                },
                {
                    "last_affected": "9.11.0-alpha1"
                },
                {
                    "introduced": "9.11.0-alpha2"
                },
                {
                    "last_affected": "9.11.0-alpha2"
                },
                {
                    "introduced": "9.11.0-alpha2"
                },
                {
                    "last_affected": "9.11.0-alpha2"
                },
                {
                    "introduced": "9.11.0-alpha3"
                },
                {
                    "last_affected": "9.11.0-alpha3"
                },
                {
                    "introduced": "9.11.0-alpha3"
                },
                {
                    "last_affected": "9.11.0-alpha3"
                },
                {
                    "introduced": "9.11.0-beta1"
                },
                {
                    "last_affected": "9.11.0-beta1"
                },
                {
                    "introduced": "9.11.0-beta1"
                },
                {
                    "last_affected": "9.11.0-beta1"
                }
            ],
            "cpes": [
                "cpe:2.3:a:isc:bind:9.10.4:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.10.4:beta2:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.10.4:beta3:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.0:alpha1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.0:alpha2:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.0:alpha3:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.0:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.9:s1rc1:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "isc:bind"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_desktop"
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.2"
                },
                {
                    "last_affected": "7.2"
                },
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.4"
                },
                {
                    "last_affected": "7.4"
                },
                {
                    "introduced": "7.5"
                },
                {
                    "last_affected": "7.5"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                },
                {
                    "introduced": "7.7"
                },
                {
                    "last_affected": "7.7"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_eus"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server"
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.2"
                },
                {
                    "last_affected": "7.2"
                },
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                },
                {
                    "introduced": "7.7"
                },
                {
                    "last_affected": "7.7"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server_aus"
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.2"
                },
                {
                    "last_affected": "7.2"
                },
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                },
                {
                    "introduced": "7.7"
                },
                {
                    "last_affected": "7.7"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server_tus"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_workstation"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "introduced": "9.9.9-b1"
        },
        {
            "last_affected": "9.9.9-b1"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.9.9-s1"
        },
        {
            "last_affected": "9.9.9-s1"
        },
        {
            "introduced": "9.9.9-b2"
        },
        {
            "last_affected": "9.9.9-b2"
        },
        {
            "introduced": "9.9.9-rc1"
        },
        {
            "last_affected": "9.9.9-rc1"
        },
        {
            "introduced": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.11.0-NA"
        },
        {
            "last_affected": "9.11.0-NA"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

9.*
9.10.4-NA
9.10.4-p1
9.11.0-NA
9.9.9-NA
9.9.9-b1
9.9.9-b2
9.9.9-rc1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2775.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "introduced": "9.9.9-b1"
        },
        {
            "last_affected": "9.9.9-b1"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.9.9-s1"
        },
        {
            "last_affected": "9.9.9-s1"
        },
        {
            "introduced": "9.9.9-b2"
        },
        {
            "last_affected": "9.9.9-b2"
        },
        {
            "introduced": "9.9.9-rc1"
        },
        {
            "last_affected": "9.9.9-rc1"
        },
        {
            "introduced": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.11.0-NA"
        },
        {
            "last_affected": "9.11.0-NA"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

9.*
9.10.4-NA
9.10.4-p1
9.11.0-NA
9.9.9-NA
9.9.9-b1
9.9.9-b2
9.9.9-rc1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2775.json"