CVE-2016-9131

—

CVSS 3.1

7.5 high

EPSS

41%p99

Published

Jan 12, 2017 (Jan 12, 2017)

Modified

Jun 17, 2026

Description

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Vendors: isc debian redhat netapp
Products: bind, debian linux, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux server workstation, data ontap edge, hci management node, solidfire, steelstore cloud integrated storage
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (40.6%)

In the news1 stories

The ISC issued updates for 4 High Severity DoS Flaws in BIND

Security AffairsJan 12, 22:04 UTC · Jan 12, 2017Vulnerability CVE-2016-9778 CVE-2016-9147 CVE-2016-9131+1 CVEs