Sploitus

CVE-2016-2776

7 known exploits for CVE-2016-2776

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Affected products
Alt Linux, Bind Server, Centos, Freebsd, Ibm Aix, Isc Bind 9, Red Hat, Suse
Oracle Linux
= 5.0, 6, 7
Fix
Available
CVSS 2.0
7.8 HIGH
CVSS 3.1
7.5 HIGH
EPSS
89.5% (100th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2016-09-28
CVE-2016-2776 at NVD
Authoritative description, scoring and affected products

7 known exploits for CVE-2016-2776

Proof-of-concept code and exploit modules indexed by Sploitus

BIND TSIG Query Denial of Service
2024-08-31 Martin Rocha, Ezequiel Tavella, Alejandro Parodi, Infobyte Research Team, metasploit.comPACKETSTORMRuby
Bind 9 DNS Server - Denial of Service Exploit
2016-10-04 InfobyteZDTRuby
ISC BIND 9 - Denial of Service
2016-10-04 InfobyteEXPLOITPACKRuby
ISC BIND 9 - Denial of Service
2016-10-04 InfobyteEXPLOITDBRuby
BIND 9 DNS Server Denial Of Service
2016-10-04 Martin RochaPACKETSTORMRuby
Exploit for Improper Input Validation in Oracle Linux
2016-09-30 infobyteGITHUB
BIND TSIG Query Denial of Service
2016-09-27 Martin Rocha, Ezequiel Tavella, Alejandro Parodi, Infobyte Research TeamMETASPLOITRuby