CVE-2016-9131

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2017-0062.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3758Third Party Advisory
http://www.securityfocus.com/bid/95386Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037582Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1583Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687Patch, Third Party Advisory
https://kb.isc.org/article/AA-01439/74/CVE-2016-9131Patch, Vendor Advisory
https://security.gentoo.org/glsa/201708-01Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0062.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3758Third Party Advisory
http://www.securityfocus.com/bid/95386Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037582Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1583Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687Patch, Third Party Advisory
https://kb.isc.org/article/AA-01439/74/CVE-2016-9131Patch, Vendor Advisory
https://security.gentoo.org/glsa/201708-01Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory

Timeline

Published: Jan 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-91329.8In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be co CVE-2016-91347.5Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Di CVE-2016-91357.5Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the vers CVE-2016-91367.5Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive informati CVE-2016-91379.8Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote CVE-2016-91389.8PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to caus CVE-2016-91396.1Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0 CVE-2016-91477.5named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and d CVE-2016-91486.1Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inje CVE-2016-91496.5The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x CVE-2016-91509.8Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x CVE-2016-91517.8Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x befor