CVE-2016-6170

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6170
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6170.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6170
Downstream
Related
Published
2016-07-06T14:59:05.597Z
Modified
2026-07-08T05:48:41.044963509Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:isc:bind:9.9.9:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.9:beta2:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "9.9.9-beta1"
                },
                {
                    "last_affected": "9.9.9-beta1"
                },
                {
                    "introduced": "9.9.9-beta1"
                },
                {
                    "last_affected": "9.9.9-beta1"
                },
                {
                    "introduced": "9.9.9-beta2"
                },
                {
                    "last_affected": "9.9.9-beta2"
                },
                {
                    "introduced": "9.9.9-beta2"
                },
                {
                    "last_affected": "9.9.9-beta2"
                }
            ],
            "vendor_product": "isc:bind",
            "source": "CPE_STRING"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0"
                },
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Last affected
2d6d4babba5b5d2237bd37c0e4c3c993b7efd255
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
2799933bc6790356d4b3eebdfe21dc0f87977f14
Introduced
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Last affected
a23f742c3d767f41bfb1a143b0605a766936c4d9
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "introduced": "9.11.0-b1"
        },
        {
            "last_affected": "9.11.0-b1"
        },
        {
            "introduced": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "introduced": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-a3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

9.*
9.10.4-NA
9.10.4-p1
9.11.0-a1
9.11.0-a2
9.11.0-a3
9.9.9-NA
9.9.9-p1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6170.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Last affected
2d6d4babba5b5d2237bd37c0e4c3c993b7efd255
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
2799933bc6790356d4b3eebdfe21dc0f87977f14
Introduced
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Last affected
a23f742c3d767f41bfb1a143b0605a766936c4d9
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "introduced": "9.11.0-b1"
        },
        {
            "last_affected": "9.11.0-b1"
        },
        {
            "introduced": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "introduced": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-a3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

9.*
9.10.4-NA
9.10.4-p1
9.11.0-a1
9.11.0-a2
9.11.0-a3
9.9.9-NA
9.9.9-p1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6170.json"