CVE-2016-6170
Medium
Description
ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Isc Bind
PublishedJul 6, 2016
First seenJul 6, 2016
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | 9.0 ≤ v ≤ 9.9.8, 9.10.0 ≤ v ≤ 9.10.3, 9.9.9, 9.10.4, 9.11.0 | — |
| redhat enterprise_linux | 5.0, 6.0, 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.