CVE-2016-2776

Source
https://cve.org/CVERecord?id=CVE-2016-2776
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2776.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-2776
Downstream
Related
Published
2016-09-28T10:59:00.157Z
Modified
2026-07-07T08:47:08.220437012Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Database specific
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "11.31"
                },
                {
                    "last_affected": "11.31"
                }
            ],
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*"
            ],
            "vendor_product": "hp:hp-ux"
        },
        {
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0"
                },
                {
                    "introduced": "6"
                },
                {
                    "last_affected": "6"
                },
                {
                    "introduced": "7"
                },
                {
                    "last_affected": "7"
                }
            ],
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*",
                "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:linux"
        },
        {
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "10.0"
                },
                {
                    "last_affected": "10.0"
                },
                {
                    "introduced": "11.3"
                },
                {
                    "last_affected": "11.3"
                }
            ],
            "cpes": [
                "cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:solaris"
        },
        {
            "extracted_events": [
                {
                    "introduced": "3.2"
                },
                {
                    "last_affected": "3.2"
                },
                {
                    "introduced": "3.3"
                },
                {
                    "last_affected": "3.3"
                },
                {
                    "introduced": "3.4"
                },
                {
                    "last_affected": "3.4"
                }
            ],
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:vm_server"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
Last affected
Database specific
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.0"
        },
        {
            "introduced": "9.10.0-a1"
        },
        {
            "last_affected": "9.10.0-a1"
        },
        {
            "introduced": "9.10.0-b1"
        },
        {
            "last_affected": "9.10.0-b1"
        },
        {
            "introduced": "9.10.0-p1"
        },
        {
            "last_affected": "9.10.0-p1"
        },
        {
            "introduced": "9.10.0-a2"
        },
        {
            "last_affected": "9.10.0-a2"
        },
        {
            "introduced": "9.10.0-b2"
        },
        {
            "last_affected": "9.10.0-b2"
        },
        {
            "introduced": "9.10.0-p2"
        },
        {
            "last_affected": "9.10.0-p2"
        },
        {
            "introduced": "9.10.0-rc1"
        },
        {
            "last_affected": "9.10.0-rc1"
        },
        {
            "introduced": "9.10.0-rc2"
        },
        {
            "last_affected": "9.10.0-rc2"
        },
        {
            "introduced": "9.10.1"
        },
        {
            "last_affected": "9.10.1"
        },
        {
            "introduced": "9.10.1-b1"
        },
        {
            "last_affected": "9.10.1-b1"
        },
        {
            "introduced": "9.10.1-p1"
        },
        {
            "last_affected": "9.10.1-p1"
        },
        {
            "introduced": "9.10.1-b2"
        },
        {
            "last_affected": "9.10.1-b2"
        },
        {
            "introduced": "9.10.1-p2"
        },
        {
            "last_affected": "9.10.1-p2"
        },
        {
            "introduced": "9.10.1-rc1"
        },
        {
            "last_affected": "9.10.1-rc1"
        },
        {
            "introduced": "9.10.1-rc2"
        },
        {
            "last_affected": "9.10.1-rc2"
        },
        {
            "introduced": "9.10.2-b1"
        },
        {
            "last_affected": "9.10.2-b1"
        },
        {
            "introduced": "9.10.2-p1"
        },
        {
            "last_affected": "9.10.2-p1"
        },
        {
            "introduced": "9.10.2-p2"
        },
        {
            "last_affected": "9.10.2-p2"
        },
        {
            "introduced": "9.10.2-p3"
        },
        {
            "last_affected": "9.10.2-p3"
        },
        {
            "introduced": "9.10.2-p4"
        },
        {
            "last_affected": "9.10.2-p4"
        },
        {
            "introduced": "9.10.2-rc1"
        },
        {
            "last_affected": "9.10.2-rc1"
        },
        {
            "introduced": "9.10.2-rc2"
        },
        {
            "last_affected": "9.10.2-rc2"
        },
        {
            "introduced": "9.10.3"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.10.3-b1"
        },
        {
            "last_affected": "9.10.3-b1"
        },
        {
            "introduced": "9.10.3-p1"
        },
        {
            "last_affected": "9.10.3-p1"
        },
        {
            "introduced": "9.10.3-p2"
        },
        {
            "last_affected": "9.10.3-p2"
        },
        {
            "introduced": "9.10.3-p3"
        },
        {
            "last_affected": "9.10.3-p3"
        },
        {
            "introduced": "9.10.3-p4"
        },
        {
            "last_affected": "9.10.3-p4"
        },
        {
            "introduced": "9.10.3-rc1"
        },
        {
            "last_affected": "9.10.3-rc1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "introduced": "9.11.0-b1"
        },
        {
            "last_affected": "9.11.0-b1"
        },
        {
            "introduced": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "introduced": "9.11.0-b2"
        },
        {
            "last_affected": "9.11.0-b2"
        },
        {
            "introduced": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-a3"
        },
        {
            "introduced": "9.11.0-b3"
        },
        {
            "last_affected": "9.11.0-b3"
        },
        {
            "introduced": "9.11.0-rc1"
        },
        {
            "last_affected": "9.11.0-rc1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:*:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:rc1:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

9.*
9.10.0
9.10.0-a1
9.10.0-a2
9.10.0-rc1
9.10.0-rc2
9.10.1
9.10.1-b1
9.10.1-b2
9.10.1-rc1
9.10.1-rc2
9.10.2-b1
9.10.2-p2
9.10.2-p3
9.10.2-p4
9.10.2-rc1
9.10.2-rc2
9.10.3
9.10.3-b1
9.10.3-p2
9.10.3-p3
9.10.3-p4
9.10.3-rc1
9.10.4-p2
9.10.4-p3
9.11.0-a1
9.11.0-a2
9.11.0-a3
9.11.0-rc1
v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.9.0
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2776.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
Last affected
Database specific
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:*:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:rc1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.0"
        },
        {
            "introduced": "9.10.0-a1"
        },
        {
            "last_affected": "9.10.0-a1"
        },
        {
            "introduced": "9.10.0-b1"
        },
        {
            "last_affected": "9.10.0-b1"
        },
        {
            "introduced": "9.10.0-p1"
        },
        {
            "last_affected": "9.10.0-p1"
        },
        {
            "introduced": "9.10.0-a2"
        },
        {
            "last_affected": "9.10.0-a2"
        },
        {
            "introduced": "9.10.0-b2"
        },
        {
            "last_affected": "9.10.0-b2"
        },
        {
            "introduced": "9.10.0-p2"
        },
        {
            "last_affected": "9.10.0-p2"
        },
        {
            "introduced": "9.10.0-rc1"
        },
        {
            "last_affected": "9.10.0-rc1"
        },
        {
            "introduced": "9.10.0-rc2"
        },
        {
            "last_affected": "9.10.0-rc2"
        },
        {
            "introduced": "9.10.1"
        },
        {
            "last_affected": "9.10.1"
        },
        {
            "introduced": "9.10.1-b1"
        },
        {
            "last_affected": "9.10.1-b1"
        },
        {
            "introduced": "9.10.1-p1"
        },
        {
            "last_affected": "9.10.1-p1"
        },
        {
            "introduced": "9.10.1-b2"
        },
        {
            "last_affected": "9.10.1-b2"
        },
        {
            "introduced": "9.10.1-p2"
        },
        {
            "last_affected": "9.10.1-p2"
        },
        {
            "introduced": "9.10.1-rc1"
        },
        {
            "last_affected": "9.10.1-rc1"
        },
        {
            "introduced": "9.10.1-rc2"
        },
        {
            "last_affected": "9.10.1-rc2"
        },
        {
            "introduced": "9.10.2-b1"
        },
        {
            "last_affected": "9.10.2-b1"
        },
        {
            "introduced": "9.10.2-p1"
        },
        {
            "last_affected": "9.10.2-p1"
        },
        {
            "introduced": "9.10.2-p2"
        },
        {
            "last_affected": "9.10.2-p2"
        },
        {
            "introduced": "9.10.2-p3"
        },
        {
            "last_affected": "9.10.2-p3"
        },
        {
            "introduced": "9.10.2-p4"
        },
        {
            "last_affected": "9.10.2-p4"
        },
        {
            "introduced": "9.10.2-rc1"
        },
        {
            "last_affected": "9.10.2-rc1"
        },
        {
            "introduced": "9.10.2-rc2"
        },
        {
            "last_affected": "9.10.2-rc2"
        },
        {
            "introduced": "9.10.3"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "9.10.3-b1"
        },
        {
            "last_affected": "9.10.3-b1"
        },
        {
            "introduced": "9.10.3-p1"
        },
        {
            "last_affected": "9.10.3-p1"
        },
        {
            "introduced": "9.10.3-p2"
        },
        {
            "last_affected": "9.10.3-p2"
        },
        {
            "introduced": "9.10.3-p3"
        },
        {
            "last_affected": "9.10.3-p3"
        },
        {
            "introduced": "9.10.3-p4"
        },
        {
            "last_affected": "9.10.3-p4"
        },
        {
            "introduced": "9.10.3-rc1"
        },
        {
            "last_affected": "9.10.3-rc1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "introduced": "9.11.0-b1"
        },
        {
            "last_affected": "9.11.0-b1"
        },
        {
            "introduced": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "introduced": "9.11.0-b2"
        },
        {
            "last_affected": "9.11.0-b2"
        },
        {
            "introduced": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-a3"
        },
        {
            "introduced": "9.11.0-b3"
        },
        {
            "last_affected": "9.11.0-b3"
        },
        {
            "introduced": "9.11.0-rc1"
        },
        {
            "last_affected": "9.11.0-rc1"
        }
    ]
}

Affected versions

9.*
9.10.0
9.10.0-a1
9.10.0-a2
9.10.0-rc1
9.10.0-rc2
9.10.1
9.10.1-b1
9.10.1-b2
9.10.1-rc1
9.10.1-rc2
9.10.2-b1
9.10.2-p2
9.10.2-p3
9.10.2-p4
9.10.2-rc1
9.10.2-rc2
9.10.3
9.10.3-b1
9.10.3-p2
9.10.3-p3
9.10.3-p4
9.10.3-rc1
9.10.4-p2
9.10.4-p3
9.11.0-a1
9.11.0-a2
9.11.0-a3
9.11.0-rc1
v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.9.0
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2776.json"