CVE-2016-2775

—

CVSS 3.1

5.9 medium

EPSS

63%p99

Published

Jul 19, 2016 (Jul 19, 2016)

Modified

Jun 17, 2026

Description

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

Vendors: hp isc fedoraproject redhat
Products: hp-ux, bind, fedora, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux workstation
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (63.3%)

In the news0 stories

No ingested article mentions this CVE yet.