Exploit for Improper Input Validation in Oracle Linux

githubexploit · 2016-09-30

Description

Exploit for improper input validation in Oracle Linux BIND DNS, CVE-2016-2776, PoC and Metasploit.

Entry point

ParameterTSIG · request body

Path/2016/10/a-tale-of-dns-packet-cve-2016-2776.html

Denial of service in BIND via crafted TSIG DNS query that triggers assertion failure and daemon exit

Affected Oracle Linux versions

Oracle Linux= 5.0, 6, 7

All known vulnerabilities by product

Alt Linux Bind Server Centos Freebsd Ibm Aix Isc Bind 9 Red Hat Suse

CVSS 7.8 for CVE-2016-2776

7.8

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:NONE

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

89.5%higher than 99.8% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-02-09 00:01

Last Seen:2025-12-12 16:17

Reporter:infobyte

Written in:Ruby

Last commit:2016-10-03

Tags

Oracle LinuxBind DNSInput validationProof of conceptMetasploit module

Other exploits for CVE-2016-2776

BIND TSIG Query Denial of Service

2024-08-31 Martin Rocha, Ezequiel Tavella, Alejandro Parodi, Infobyte Research Team, metasploit.comPACKETSTORMRuby

Bind 9 DNS Server - Denial of Service Exploit

2016-10-04 InfobyteZDTRuby

ISC BIND 9 - Denial of Service

2016-10-04 InfobyteEXPLOITPACKRuby

ISC BIND 9 - Denial of Service

2016-10-04 InfobyteEXPLOITDBRuby

BIND 9 DNS Server Denial Of Service

2016-10-04 Martin RochaPACKETSTORMRuby

BIND TSIG Query Denial of Service

2016-09-27 Martin Rocha, Ezequiel Tavella, Alejandro Parodi, Infobyte Research TeamMETASPLOITRuby

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=E183E822-9005-5F4E-B024-D9C4761AE308
# CVE-2016-2776
A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776.

http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html

In this repository you will find:

* Proof-of-Concept (namedown.py)
* Metasploit Auxiliary Module (namedown.rb)