CVE-2016-9147

MEDIUM

Description

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.

References

http://rhn.redhat.com/errata/RHSA-2017-0062.html

http://rhn.redhat.com/errata/RHSA-2017-0063.html

http://rhn.redhat.com/errata/RHSA-2017-0064.html

http://www.debian.org/security/2017/dsa-3758

http://www.securityfocus.com/bid/95390

http://www.securitytracker.com/id/1037582

https://access.redhat.com/errata/RHSA-2017:1582

https://access.redhat.com/errata/RHSA-2017:1583

https://kb.isc.org/article/AA-01440/74/CVE-2016-9147

https://security.gentoo.org/glsa/201708-01

https://security.netapp.com/advisory/ntap-20180926-0005/

Details

Source: MITRE

Published: 2017-01-12

Updated: 2018-09-27

Type: CWE-20

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (41 total)

ID	Name	Product	Family	Severity
137170	OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)	Nessus	OracleVM Local Security Checks	critical
102531	GLSA-201708-01 : BIND: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
101409	Virtuozzo 7 : bind97 / bind97-chroot / bind97-devel / etc (VZLSA-2017-0064)	Nessus	Virtuozzo Local Security Checks	medium
101408	Virtuozzo 6 : bind / bind-chroot / bind-devel / bind-libs / etc (VZLSA-2017-0063)	Nessus	Virtuozzo Local Security Checks	medium
101407	Virtuozzo 7 : bind / bind-chroot / bind-devel / bind-libs / etc (VZLSA-2017-0062)	Nessus	Virtuozzo Local Security Checks	medium
101100	RHEL 7 : bind (RHSA-2017:1583)	Nessus	Red Hat Local Security Checks	medium
101099	RHEL 6 : bind (RHSA-2017:1582)	Nessus	Red Hat Local Security Checks	medium
100090	OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0100)	Nessus	OracleVM Local Security Checks	medium
99871	EulerOS 2.0 SP2 : bind (EulerOS-SA-2017-1026)	Nessus	Huawei Local Security Checks	medium
99870	EulerOS 2.0 SP1 : bind (EulerOS-SA-2017-1025)	Nessus	Huawei Local Security Checks	medium
99569	OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0066)	Nessus	OracleVM Local Security Checks	critical
97864	F5 Networks BIG-IP : BIND vulnerability (K02138183)	Nessus	F5 Networks Local Security Checks	medium
97148	Amazon Linux AMI : bind (ALAS-2017-798)	Nessus	Amazon Linux Local Security Checks	medium
96840	Debian DLA-805-1 : bind9 security update	Nessus	Debian Local Security Checks	medium
96625	ISC BIND 9 < 9.9.9-P5 / 9.9.9-S7 / 9.10.4-P5 / 9.11.0-P2 Multiple DoS	Nessus	DNS	medium
96621	openSUSE Security Update : bind (openSUSE-2017-114)	Nessus	SuSE Local Security Checks	medium
96591	OracleVM 3.2 : bind (OVMSA-2017-0034)	Nessus	OracleVM Local Security Checks	medium
96590	OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0033)	Nessus	OracleVM Local Security Checks	medium
96586	Oracle Linux 5 : bind97 (ELSA-2017-0064)	Nessus	Oracle Linux Local Security Checks	medium
96585	Oracle Linux 5 / 6 : bind (ELSA-2017-0063)	Nessus	Oracle Linux Local Security Checks	medium
96584	Oracle Linux 7 : bind (ELSA-2017-0062)	Nessus	Oracle Linux Local Security Checks	medium
96581	openSUSE Security Update : bind (openSUSE-2017-109)	Nessus	SuSE Local Security Checks	medium
96569	CentOS 5 : bind97 (CESA-2017:0064)	Nessus	CentOS Local Security Checks	medium
96568	CentOS 5 / 6 : bind (CESA-2017:0063)	Nessus	CentOS Local Security Checks	medium
96567	CentOS 7 : bind (CESA-2017:0062)	Nessus	CentOS Local Security Checks	medium
96563	Scientific Linux Security Update : bind on SL7.x x86_64 (20170116)	Nessus	Scientific Linux Local Security Checks	medium
96562	Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64 (20170116)	Nessus	Scientific Linux Local Security Checks	medium
96561	Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20170116)	Nessus	Scientific Linux Local Security Checks	medium
96540	Fedora 24 : bind99 (2017-8f23f564ad)	Nessus	Fedora Local Security Checks	medium
96538	Fedora 24 : 32:bind (2017-59ca54c94e)	Nessus	Fedora Local Security Checks	medium
96525	RHEL 5 : bind97 (RHSA-2017:0064)	Nessus	Red Hat Local Security Checks	medium
96524	RHEL 5 / 6 : bind (RHSA-2017:0063)	Nessus	Red Hat Local Security Checks	medium
96523	RHEL 7 : bind (RHSA-2017:0062)	Nessus	Red Hat Local Security Checks	medium
96508	Fedora 25 : bind99 (2017-f44f2f5a48)	Nessus	Fedora Local Security Checks	medium
96503	Fedora 25 : 32:bind (2017-87992a0557)	Nessus	Fedora Local Security Checks	medium
96483	Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : bind9 vulnerabilities (USN-3172-1)	Nessus	Ubuntu Local Security Checks	medium
96473	FreeBSD : BIND -- multiple vulnerabilities (d4c7e9a9-d893-11e6-9b4d-d050996490d0)	Nessus	FreeBSD Local Security Checks	medium
96460	Debian DSA-3758-1 : bind9 - security update	Nessus	Debian Local Security Checks	medium
96435	SUSE SLES12 Security Update : bind (SUSE-SU-2017:0113-1)	Nessus	SuSE Local Security Checks	medium
96434	SUSE SLES11 Security Update : bind (SUSE-SU-2017:0112-1)	Nessus	SuSE Local Security Checks	medium
96433	SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2017:0111-1)	Nessus	SuSE Local Security Checks	medium