CVE-2016-9147high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
References
http://rhn.redhat.com/errata/RHSA-2017-0062.html
http://rhn.redhat.com/errata/RHSA-2017-0063.html
http://rhn.redhat.com/errata/RHSA-2017-0064.html
http://www.debian.org/security/2017/dsa-3758
http://www.securityfocus.com/bid/95390
http://www.securitytracker.com/id/1037582
https://access.redhat.com/errata/RHSA-2017:1582
https://access.redhat.com/errata/RHSA-2017:1583
https://kb.isc.org/article/AA-01440/74/CVE-2016-9147
Details
Source: MITRE
Published: 2017-01-12
Updated: 2018-09-27
Type: CWE-20
Risk Information
CVSS v2
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
CVSS v3
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.9:s6:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 147614 | EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2021-1396) | Nessus | Huawei Local Security Checks | high |
| 137170 | OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021) | Nessus | OracleVM Local Security Checks | high |
| 102531 | GLSA-201708-01 : BIND: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 101409 | Virtuozzo 7 : bind97 / bind97-chroot / bind97-devel / etc (VZLSA-2017-0064) | Nessus | Virtuozzo Local Security Checks | high |
| 101408 | Virtuozzo 6 : bind / bind-chroot / bind-devel / bind-libs / etc (VZLSA-2017-0063) | Nessus | Virtuozzo Local Security Checks | high |
| 101407 | Virtuozzo 7 : bind / bind-chroot / bind-devel / bind-libs / etc (VZLSA-2017-0062) | Nessus | Virtuozzo Local Security Checks | high |
| 101100 | RHEL 7 : bind (RHSA-2017:1583) | Nessus | Red Hat Local Security Checks | high |
| 101099 | RHEL 6 : bind (RHSA-2017:1582) | Nessus | Red Hat Local Security Checks | high |
| 100090 | OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0100) | Nessus | OracleVM Local Security Checks | high |
| 99871 | EulerOS 2.0 SP2 : bind (EulerOS-SA-2017-1026) | Nessus | Huawei Local Security Checks | high |
| 99870 | EulerOS 2.0 SP1 : bind (EulerOS-SA-2017-1025) | Nessus | Huawei Local Security Checks | high |
| 99569 | OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0066) | Nessus | OracleVM Local Security Checks | high |
| 97864 | F5 Networks BIG-IP : BIND vulnerability (K02138183) | Nessus | F5 Networks Local Security Checks | high |
| 97148 | Amazon Linux AMI : bind (ALAS-2017-798) | Nessus | Amazon Linux Local Security Checks | high |
| 96840 | Debian DLA-805-1 : bind9 security update | Nessus | Debian Local Security Checks | high |
| 96625 | ISC BIND 9 < 9.9.9-P5 / 9.9.9-S7 / 9.10.4-P5 / 9.11.0-P2 Multiple DoS | Nessus | DNS | high |
| 96621 | openSUSE Security Update : bind (openSUSE-2017-114) | Nessus | SuSE Local Security Checks | high |
| 96591 | OracleVM 3.2 : bind (OVMSA-2017-0034) | Nessus | OracleVM Local Security Checks | high |
| 96590 | OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0033) | Nessus | OracleVM Local Security Checks | high |
| 96586 | Oracle Linux 5 : bind97 (ELSA-2017-0064) | Nessus | Oracle Linux Local Security Checks | high |
| 96585 | Oracle Linux 5 / 6 : bind (ELSA-2017-0063) | Nessus | Oracle Linux Local Security Checks | high |
| 96584 | Oracle Linux 7 : bind (ELSA-2017-0062) | Nessus | Oracle Linux Local Security Checks | high |
| 96581 | openSUSE Security Update : bind (openSUSE-2017-109) | Nessus | SuSE Local Security Checks | high |
| 96569 | CentOS 5 : bind97 (CESA-2017:0064) | Nessus | CentOS Local Security Checks | high |
| 96568 | CentOS 5 / 6 : bind (CESA-2017:0063) | Nessus | CentOS Local Security Checks | high |
| 96567 | CentOS 7 : bind (CESA-2017:0062) | Nessus | CentOS Local Security Checks | high |
| 96563 | Scientific Linux Security Update : bind on SL7.x x86_64 (20170116) | Nessus | Scientific Linux Local Security Checks | high |
| 96562 | Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64 (20170116) | Nessus | Scientific Linux Local Security Checks | high |
| 96561 | Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20170116) | Nessus | Scientific Linux Local Security Checks | high |
| 96540 | Fedora 24 : bind99 (2017-8f23f564ad) | Nessus | Fedora Local Security Checks | high |
| 96538 | Fedora 24 : 32:bind (2017-59ca54c94e) | Nessus | Fedora Local Security Checks | high |
| 96525 | RHEL 5 : bind97 (RHSA-2017:0064) | Nessus | Red Hat Local Security Checks | high |
| 96524 | RHEL 5 / 6 : bind (RHSA-2017:0063) | Nessus | Red Hat Local Security Checks | high |
| 96523 | RHEL 7 : bind (RHSA-2017:0062) | Nessus | Red Hat Local Security Checks | high |
| 96508 | Fedora 25 : bind99 (2017-f44f2f5a48) | Nessus | Fedora Local Security Checks | high |
| 96503 | Fedora 25 : 32:bind (2017-87992a0557) | Nessus | Fedora Local Security Checks | high |
| 96483 | Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : bind9 vulnerabilities (USN-3172-1) | Nessus | Ubuntu Local Security Checks | high |
| 96473 | FreeBSD : BIND -- multiple vulnerabilities (d4c7e9a9-d893-11e6-9b4d-d050996490d0) | Nessus | FreeBSD Local Security Checks | high |
| 96460 | Debian DSA-3758-1 : bind9 - security update | Nessus | Debian Local Security Checks | high |
| 96435 | SUSE SLES12 Security Update : bind (SUSE-SU-2017:0113-1) | Nessus | SuSE Local Security Checks | high |
| 96434 | SUSE SLES11 Security Update : bind (SUSE-SU-2017:0112-1) | Nessus | SuSE Local Security Checks | high |
| 96433 | SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2017:0111-1) | Nessus | SuSE Local Security Checks | high |