CVE-2016-9131

Опубликовано: 12 янв. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Высокий

Описание

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Ссылки

http://rhn.redhat.com/errata/RHSA-2017-0062.html
Third Party Advisory
http://www.debian.org/security/2017/dsa-3758
Third Party Advisory
http://www.securityfocus.com/bid/95386
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037582
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1583
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687
Patch
Third Party Advisory
https://kb.isc.org/article/AA-01439/74/CVE-2016-9131
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201708-01
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0062.html
Third Party Advisory
http://www.debian.org/security/2017/dsa-3758
Third Party Advisory
http://www.securityfocus.com/bid/95386
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037582
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1583
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687
Patch
Third Party Advisory
https://kb.isc.org/article/AA-01439/74/CVE-2016-9131
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201708-01
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*

Версия от 9.0 (включая) до 9.9.8 (включая)

cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*

Версия от 9.10.0 (включая) до 9.10.3 (включая)

cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:b2:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:b3:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.4:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:b2:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:b3:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.11.0:rc1:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.7283

Высокий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-9131

CVSS3: 7.5

ubuntu

почти 9 лет назад

CVE-2016-9131

CVSS3: 7.5

redhat

почти 9 лет назад

CVE-2016-9131

CVSS3: 7.5

debian

почти 9 лет назад

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9. ...

GHSA-75r9-9rpr-7px8

CVSS3: 7.5

github

больше 3 лет назад

openSUSE-SU-2017:0193-1

suse-cvrf

почти 9 лет назад

Security update for bind

EPSS

Процентиль: 99%

0.7283

Высокий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20