NVD

Id
18392  
Name
CVE-2016-2088  
Description
resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-03-09  
Modified Date
2016-12-02  
Seq
2016-2088  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101763 18392 CVE-2016-2088 FEDORA-2016-364c0a9df4  View
101764 18392 CVE-2016-2088 FEDORA-2016-b593e84223  View
101765 18392 CVE-2016-2088 FEDORA-2016-75f31fbb0a  View
101766 18392 CVE-2016-2088 84290  View
101767 18392 CVE-2016-2088 1035238  View
101768 18392 CVE-2016-2088 https://kb.isc.org/article/AA-01351  View
101769 18392 CVE-2016-2088 https://kb.isc.org/article/AA-01380  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1153 JVNDB-2016-001926 ISC BIND の named の resolver.c におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND の named の resolver.c には、DNS Cookie が有効な場合、サービス運用妨害 (表明違反およびデーモンの停止) 状態にされる脆弱性が存在します。 CVE-2016-2088 88594 CVE-2016-2088 18392 4.3 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001926.html 2016-03-09 2016-08-25 View