CVE-2016-2776
HighSummary
In buffer.c in ISC BIND 9 before version 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3, responses are not properly constructed, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the DNS server's operation, potentially leading to service unavailability for users.
Recommendation
It is recommended to update ISC BIND to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.
Other vulnerabilities in ISC BIND
See all- CVE-2016-9444High
In ISC BIND 9.x before version 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2, a vulnerability allows remote attackers to cause a denial of service via a crafted DS resource record in an answer.
- CVE-2016-9147High
ISC BIND versions 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 contain a vulnerability that allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among DNSSEC-related RRsets.
- CVE-2016-9131High
ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 has a vulnerability that allows remote attackers to cause a denial of service via a malformed response to an RTYPE ANY query.
- CVE-2016-8864High
A vulnerability in ISC BIND 9.x before version 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service via a DNAME record in the answer section of a response to a recursive query.
- CVE-2016-2848High
ISC BIND versions 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allow remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
- CVE-2016-1286High
A vulnerability in ISC BIND 9.x before version 9.9.8-P4 and 9.10.x before version 9.10.3-P4 allows remote attackers to cause a denial of service via a crafted signature record for a DNAME record.
- CVE-2015-8705High
In buffer.c in ISC BIND 9.10.x before version 9.10.3-P3, when debug logging is enabled, remote attackers can cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via OPT data or an ECS option.
- CVE-2015-8461High
A race condition in resolver.c in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
- CVE-2015-5986High
In ISC BIND versions 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
- CVE-2015-5722High
In ISC BIND 9.x before version 9.9.7-P3 and 9.10.x before version 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Original NVD description (English source)
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.