WaratekVRT Sign in

CVE-2016-9131 ISC BIND

Affected softwareISC BIND
Severity7.5 High CVSS 3.1 2 scores
WeaknessImproper input validation (CWE-20)
Published12 Jan 2017
Updated17 Jun 2026

Description

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 9 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC none indexed
  • EPSS 41% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99% of all scored CVEs.

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

7.5 HIGH v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 2 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD Primary published
CVSS 2.0 5.0 none AV:N/AC:L/Au:N/C:N/I:N/A:P NVD Primary

Affected software and releases

Products and versions

12 products, 45 version entries
SourceVendorProductSchemeAffected versions
nvd debian debian linux generic 8.0
nvd isc bind generic ≥ 9.0 and ≤ 9.9.8 · 9.9.9 · 9.9.9:b1 · 9.9.9:p1 · 9.9.9:b2 · 9.9.9:p3 · 9.9.9:p4 · ≥ 9.10.0 and ≤ 9.10.3 · 9.10.4:rc1 · 9.10.4:b2 · 9.10.4:p2 · 9.10.4:b3 · 9.10.4:p3 · 9.10.4:p4 · 9.11.0:rc1 · 9.11.0:a1 · 9.11.0:b1 · 9.11.0:p1 · 9.11.0:a2 · 9.11.0:b2 · 9.11.0:a3 · 9.11.0:b3
nvd netapp data ontap edge generic any version
nvd netapp hci management node generic any version
nvd netapp solidfire generic any version
nvd netapp steelstore cloud integrated storage generic any version
nvd redhat enterprise linux desktop generic 7.0
nvd redhat enterprise linux eus generic 7.2 · 7.3 · 7.4 · 7.5 · 7.6 · 7.7
nvd redhat enterprise linux server generic 7.0
nvd redhat enterprise linux server aus generic 7.2 · 7.3 · 7.4 · 7.6 · 7.7
nvd redhat enterprise linux server tus generic 7.2 · 7.3 · 7.6 · 7.7
nvd redhat enterprise linux server workstation generic 7.0

References

URLTags
http://rhn.redhat.com/errata/RHSA-2017-0062.html Third Party Advisory
http://www.debian.org/security/2017/dsa-3758 Third Party Advisory
http://www.securityfocus.com/bid/95386 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037582 Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1583 Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687 Patch, Third Party Advisory
https://kb.isc.org/article/AA-01439/74/CVE-2016-9131 Patch, Vendor Advisory
https://security.gentoo.org/glsa/201708-01 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/ Third Party Advisory

Timeline
Published2017-01-12By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.