CVE-2016-6170
- State
- Published
- Severity
- Not scored
- Published
- Jul 6, 2016
- Updated
- Aug 6, 2024
- Reserved
- Jul 6, 2016
Description
ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [dns-operations] 20160706 DNS activities in Japanmailing-list
- [dns-operations] 20160706 DNS activities in Japanmailing-list
- [oss-security] 20160706 Malicious primary DNS servers can crash secondariesmailing-list
- 1036241vdb-entry
- [dns-operations] 20160704 DNS activities in Japanmailing-list
- GLSA-201610-07vendor-advisory
- https://kb.isc.org/article/AA-01390
- 91611vdb-entry
- https://github.com/sischkg/xfer-limit/blob/master/README.md
- https://kb.isc.org/article/AA-01390/169/CVE-2016-6170
- https://bugzilla.redhat.com/show_bug.cgi?id=1353563
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.