Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 4

• High 7.5
  CVE-2016-9778

  An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c

  An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if…

  ISC BIND 9
  Jan 16, 2019
• Unscored —
  CVE-2016-9131 EPSS 41%

  named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

  bind9 bind9 bind Debian Ubuntu Alpine
  Jan 12, 2017
• Unscored —
  CVE-2016-9147 EPSS 25%

  named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (as…

  bind9 bind9 bind Debian Ubuntu Alpine
  Jan 12, 2017
• Unscored —
  CVE-2016-9444 EPSS 18%

  named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

  bind9 bind9 bind Debian Ubuntu Alpine
  Jan 12, 2017

Revision history

1. 2025-05-29 #15

   Neue Updates von Dell aufgenommen

2. 2022-02-03 #14

   Neue Updates von Oracle Linux aufgenommen

3. 2018-09-26 #13

   Added references

4. 2017-06-28 #12

   New remediations available

5. 2017-04-12 #10

   New remediations available

6. 2017-04-12 #11

   Version nicht vorhanden

7. 2017-02-06 #8

   New remediations available

8. 2017-02-06 #9

   Version nicht vorhanden

9. 2017-01-17 #7

   New remediations available

10. 2017-01-16 #6

    New remediations available

11. 2017-01-15 #5

    New remediations available

12. 2017-01-12 #3

    New remediations available

13. 2017-01-12 #4

    Version nicht vorhanden

14. 2017-01-11 #1

    Initial Release

15. 2017-01-11 #2

    Version nicht vorhanden

References

• Openwall OSS-Security vom 2017-01-11
  http://www.openwall.com/lists/oss-security/2017/01/12/1
• SUSE Security Update Announcement ID SUSE-SU-2017:0113-1 vom 2017-01-11
  https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html
• SUSE Security Update Announcement ID SUSE-SU-2017:0112-1 vom 2017-01-11
  https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html
• SUSE Security Update Announcement ID SUSE-SU-2017:0111-1 vom 2017-01-11
  https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html
• ISC BIND9 Security Advisory AA-01442 vom 2017-01-11
  https://kb.isc.org/article/AA-01442/
• ISC BIND9 Security Advisory AA-01441 vom 2017-01-11
  https://kb.isc.org/article/AA-01441/
• ISC BIND9 Security Advisory AA-01440 vom 2017-01-11
  https://kb.isc.org/article/AA-01440/
• ISC BIND9 Security Advisory AA-01439 vom 2017-01-11
  https://kb.isc.org/article/AA-01439
• F5 Security Advisory K86272821 vom 2017-01-13
  https://support.f5.com/csp/article/K86272821
• F5 Security Advisory K40181790 vom 2017-01-13
  https://support.f5.com/csp/article/K40181790
• F5 Security Advisory K02138183 vom 2017-01-12
  https://support.f5.com/csp/#/article/K02138183
• F5 Security Advisory K02138183 vom 2017-01-12
  https://support.f5.com/csp/article/K02138183
• F5 Security Advisory K25061316 vom 2017-01-11
  https://support.f5.com/csp/article/K25061316
• Red Hat Security Advisory RHSA-2017:0063 vom 2017-01-16
  https://access.redhat.com/errata/RHSA-2017:0063
• Red Hat Security Advisory RHSA-2017:0062 vom 2017-01-16
  https://access.redhat.com/errata/RHSA-2017:0062
• Red Hat Security Advisory RHSA-2017:0064 vom 2017-01-16
  https://access.redhat.com/errata/RHSA-2017:0064
• Oracle Linux Security Advisory ELSA-2017-0062 vom 2017-01-17
  http://linux.oracle.com/errata/ELSA-2017-0062.html
• Oracle Linux Security Advisory ELSA-2017-0063 vom 2017-01-17
  http://linux.oracle.com/errata/ELSA-2017-0063.html
• Oracle Linux Security Advisory ELSA-2017-0064 vom 2017-01-17
  http://linux.oracle.com/errata/ELSA-2017-0064.html
• CentOS Security Advisory CESA-2017:0063 vom 2017-01-17
  https://lwn.net/Alerts/711814
• CentOS Security Advisory CESA-2017:0063 vom 2017-01-17
  https://lwn.net/Alerts/711815
• CentOS Security Advisory CESA-2017:0062 vom 2017-01-17
  https://lwn.net/Alerts/711813
• HPE SECURITY BULLETIN HPESBUX03699 SSRT110304 rev.1 vom 2017-01-27
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05381687
• Juniper Security Bulletin JSA10785 vom 2017-04-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10785
• Red Hat Security Advisory RHSA-2017:1583 vom 2017-06-28
  https://access.redhat.com/errata/RHSA-2017:1583
• Dell/EMC Knowledge Base Article: 000529947
  https://support.emc.com/kb/529947
• Oracle Linux Security Advisory ELSA-2022-9117 vom 2022-02-03
  https://linux.oracle.com/errata/ELSA-2022-9117.html
• Dell Security Advisory DSA-2025-213 vom 2025-05-30
  https://www.dell.com/support/kbdoc/de-de/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities