CVE-2016-9131

EPSS 58.07%
Veröffentlicht 12.01.2017 06:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Isc ≫ Bind Version >= 9.0 <= 9.9.8

Isc ≫ Bind Version >= 9.10.0 <= 9.10.3

Isc ≫ Bind Version9.9.9 Update-

Isc ≫ Bind Version9.9.9 Updateb1

Isc ≫ Bind Version9.9.9 Updateb2

Isc ≫ Bind Version9.9.9 Updatep1

Isc ≫ Bind Version9.9.9 Updatep3

Isc ≫ Bind Version9.9.9 Updatep4

Isc ≫ Bind Version9.10.4 Updateb2

Isc ≫ Bind Version9.10.4 Updateb3

Isc ≫ Bind Version9.10.4 Updatep2

Isc ≫ Bind Version9.10.4 Updatep3

Isc ≫ Bind Version9.10.4 Updatep4

Isc ≫ Bind Version9.10.4 Updaterc1

Isc ≫ Bind Version9.11.0 Updatea1

Isc ≫ Bind Version9.11.0 Updatea2

Isc ≫ Bind Version9.11.0 Updatea3

Isc ≫ Bind Version9.11.0 Updateb1

Isc ≫ Bind Version9.11.0 Updateb2

Isc ≫ Bind Version9.11.0 Updateb3

Isc ≫ Bind Version9.11.0 Updatep1

Isc ≫ Bind Version9.11.0 Updaterc1

Debian ≫ Debian Linux Version8.0

Redhat ≫ Enterprise Linux Desktop Version7.0

Redhat ≫ Enterprise Linux Eus Version7.2

Redhat ≫ Enterprise Linux Eus Version7.3

Redhat ≫ Enterprise Linux Eus Version7.4

Redhat ≫ Enterprise Linux Eus Version7.5

Redhat ≫ Enterprise Linux Eus Version7.6

Redhat ≫ Enterprise Linux Eus Version7.7

Redhat ≫ Enterprise Linux Server Version7.0

Redhat ≫ Enterprise Linux Server Aus Version7.2

Redhat ≫ Enterprise Linux Server Aus Version7.3

Redhat ≫ Enterprise Linux Server Aus Version7.4

Redhat ≫ Enterprise Linux Server Aus Version7.6

Redhat ≫ Enterprise Linux Server Aus Version7.7

Redhat ≫ Enterprise Linux Server Tus Version7.2

Redhat ≫ Enterprise Linux Server Tus Version7.3

Redhat ≫ Enterprise Linux Server Tus Version7.6

Redhat ≫ Enterprise Linux Server Tus Version7.7

Redhat ≫ Enterprise Linux Server Workstation Version7.0

Netapp ≫ Data Ontap Edge Version-

Netapp ≫ Hci Management Node Version-

Netapp ≫ Solidfire Version-

Netapp ≫ Steelstore Cloud Integrated Storage Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	58.07%	0.981

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.netapp.com/advisory/ntap-20180926-0005/

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1583

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687

Patch

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0062.html

Third Party Advisory

http://www.debian.org/security/2017/dsa-3758

Third Party Advisory

http://www.securityfocus.com/bid/95386