CVE-2016-2776

HIGH EXPLOITED

Oracle Linux < 9.9.9 - Improper Input Validation

Title source: rule

Description

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Exploits (4)

exploitdb WORKING POC

by Infobyte · pythondosmultiple

https://www.exploit-db.com/exploits/40453

View Code ZIP pw:eip

nomisec WORKING POC 27 stars

by infobyte · dos

https://github.com/infobyte/CVE-2016-2776

View Code ZIP pw:eip

nomisec

by KosukeShimofuji · poc

https://github.com/KosukeShimofuji/CVE-2016-2776

View on nomisec

metasploit WORKING POC

by Martin Rocha, Ezequiel Tavella, Alejandro Parodi, Infobyte Research Team · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig.rb

View Code ZIP pw:eip

References (17)

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2016-1944.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2016-1945.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2016-2099.html

[Third Party Advisory] http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

[Third Party Advisory] http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

[Third Party Advisory] http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/93188

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036903

[Third Party Advisory] https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107

[Vendor Advisory] https://kb.isc.org/article/AA-01419/0

[Various Sources] https://kb.isc.org/article/AA-01435

[Various Sources] https://kb.isc.org/article/AA-01436

[Various Sources] https://kb.isc.org/article/AA-01438

[Various Sources] https://security.FreeBSD.org/advisories/FreeBSD-SA-16:28.bind.asc

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20160930-0001/

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/40453/

[Third Party Advisory] https://security.gentoo.org/glsa/201610-07

Scores

CVSS v3 7.5

EPSS 0.8696

EPSS Percentile 99.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

VulnCheck KEV 2016-10-05

CWE

CWE-20

Status published

Products (16)

hp/hp-ux 11.31

isc/bind 9.10.0 (9 CPE variants)

isc/bind 9.10.1 (7 CPE variants)

isc/bind 9.10.2 b1 (7 CPE variants)

isc/bind 9.10.3 (7 CPE variants)

isc/bind 9.10.4 p2 (2 CPE variants)

isc/bind 9.11.0 a1 (7 CPE variants)

isc/bind < 9.9.9

oracle/linux 5.0

oracle/linux 6

... and 6 more

Published Sep 28, 2016

Tracked Since Feb 18, 2026