Skip to content
OpenAdvisories
Unscored USN-5747-1 2 CVEs

bind9 vulnerabilities

Published Nov 29, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled large query name when using
lightweight resolver protocol. A remote attacker could use this issue to
consume resources, leading to a denial of service. (CVE-2016-2775)

It was discovered that Bind incorrectly handled large zone data size
received via AXFR response. A remote authenticated attacker could use this
issue to consume resources, leading to a denial of service. This issue only
affected Ubuntu 16.04 LTS. (CVE-2016-6170)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.19+esm9
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm5

Vulnerabilities 2

  • Unscored —
    CVE-2016-2775 EPSS 63%

    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres optio…

    bind9 bind9 Debian Ubuntu
  • Unscored —
    CVE-2016-6170 EPSS 41%

    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a …

    bind9 bind9 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-2775
  • report
    https://ubuntu.com/security/CVE-2016-6170