CVE-2016-6170

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6170
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6170.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6170
Downstream
Related
Published
2016-07-06T14:59:05.597Z
Modified
2026-05-28T04:03:16.881268488Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "9.9.9-beta1"
                },
                {
                    "last_affected": "9.9.9-beta1"
                },
                {
                    "last_affected": "9.9.9-beta2"
                },
                {
                    "last_affected": "9.9.9-beta2"
                }
            ],
            "cpes": [
                "cpe:2.3:a:isc:bind:9.9.9:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.9:beta2:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "isc:bind"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "5.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Last affected
2d6d4babba5b5d2237bd37c0e4c3c993b7efd255
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
2799933bc6790356d4b3eebdfe21dc0f87977f14
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Last affected
9833cd85a811d3a4313948f324d3906937633e65
Last affected
a5e4938f2d3c9d89b3fda65bc2fe6755ecfeea72
Last affected
632f9848811641da54fbb78c38e91a263b03d85a
Last affected
dca6957b62013f523e54084c92152f571d08f6c0
Last affected
111ec860a840d09dbd0551044e5fdc37d546c6b6
Last affected
a23f742c3d767f41bfb1a143b0605a766936c4d9
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-b1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.10.0rc2
v9.10.1
v9.10.1b1
v9.10.1b2
v9.10.1rc1
v9.10.1rc2
v9.10.2
v9.10.2b1
v9.10.2rc1
v9.10.2rc2
v9.10.3
v9.10.3b1
v9.10.3rc1
v9.10.4
v9.10.4b1
v9.10.4b2
v9.10.4b3
v9.10.4rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.9.0
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6170.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Last affected
2d6d4babba5b5d2237bd37c0e4c3c993b7efd255
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
2799933bc6790356d4b3eebdfe21dc0f87977f14
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Last affected
9833cd85a811d3a4313948f324d3906937633e65
Last affected
a5e4938f2d3c9d89b3fda65bc2fe6755ecfeea72
Last affected
632f9848811641da54fbb78c38e91a263b03d85a
Last affected
dca6957b62013f523e54084c92152f571d08f6c0
Last affected
111ec860a840d09dbd0551044e5fdc37d546c6b6
Last affected
a23f742c3d767f41bfb1a143b0605a766936c4d9
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.0"
        },
        {
            "last_affected": "9.9.8"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.9-NA"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "last_affected": "9.10.4-NA"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "last_affected": "9.11.0-a1"
        },
        {
            "last_affected": "9.11.0-a2"
        },
        {
            "last_affected": "9.11.0-a3"
        },
        {
            "last_affected": "9.11.0-b1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.10.0rc2
v9.10.1
v9.10.1b1
v9.10.1b2
v9.10.1rc1
v9.10.1rc2
v9.10.2
v9.10.2b1
v9.10.2rc1
v9.10.2rc2
v9.10.3
v9.10.3b1
v9.10.3rc1
v9.10.4
v9.10.4b1
v9.10.4b2
v9.10.4b3
v9.10.4rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.9.0
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6170.json"