NVD

Id
21052  
Name
CVE-2016-6170  
Description
ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-07-06  
Modified Date
2016-11-28  
Seq
2016-6170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114572 21052 CVE-2016-6170 [oss-security] 20160706 Malicious primary DNS servers can crash secondaries  View
114573 21052 CVE-2016-6170 91611  View
114574 21052 CVE-2016-6170 1036241  View
114575 21052 CVE-2016-6170 https://bugzilla.redhat.com/show_bug.cgi?id=1353563  View
114576 21052 CVE-2016-6170 https://github.com/sischkg/xfer-limit/blob/master/README.md  View
114577 21052 CVE-2016-6170 https://kb.isc.org/article/AA-01390  View
114578 21052 CVE-2016-6170 https://kb.isc.org/article/AA-01390/169/CVE-2016-6170  View
114579 21052 CVE-2016-6170 [dns-operations] 20160704 DNS activities in Japan  View
114580 21052 CVE-2016-6170 [dns-operations] 20160706 DNS activities in Japan  View
114581 21052 CVE-2016-6170 [dns-operations] 20160706 DNS activities in Japan  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2722 JVNDB-2016-003495 ISC BIND におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND には、サービス運用妨害 (セカンダリ DNS サーバのクラッシュ、IXFR クライアントのクラッシュ、およびプライマリ DNS サーバのクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-6170 92677 CVE-2016-6170 21052 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003495.html 2016-07-07 2016-08-03 View