Read the docs
TI-2016-02320 Aliases CVE-2016-2776GHSA-jxr9-jr43-c424

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x…

Priority HIGH 75CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 35 fixed, 1 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Why it matters now

EPSS 0.89482 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial Red Hat: 3 advisoriesRed Hat: 35 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*5.0VulnerableOracle
cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*6VulnerableOracle
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*7VulnerableOracle
cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:*3.2VulnerableOracle
cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*3.3VulnerableOracle
cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*3.4VulnerableOracle
cpe:2.3:a:isc:bind:*:p3:*:*:*:*:*:*up to 9.9.9VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*9.10.0VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*9.10.0 a1VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*9.10.0 a2VulnerableISC
  • cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Oracle
  • cpe:2.3:a:isc:bind:*:p3:*:*:*:*:*:* Versions up to 9.9.9 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:* Versions 9.10.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:* Versions 9.10.0 a1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:* Versions 9.10.0 a2 Vulnerable ·ISC
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*9.10.0 b1VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*9.10.0 b2VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*9.10.0 p1VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*9.10.0 p2VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*9.10.0 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*9.10.0 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*9.10.1VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*9.10.1 b1VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*9.10.1 b2VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*9.10.1 p1VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*9.10.1 p2VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*9.10.1 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*9.10.1 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*9.10.2 b1VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*9.10.2 p1VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*9.10.2 p2VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*9.10.2 p3VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*9.10.2 p4VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*9.10.2 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*9.10.2 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*9.10.3VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*9.10.3 b1VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*9.10.3 p1VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*9.10.3 p2VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*9.10.3 p3VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:p4:*:*:*:*:*:*9.10.3 p4VulnerableISC
cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*9.10.3 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*9.10.4 p2VulnerableISC
cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*9.10.4 p3VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*9.11.0 a1VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*9.11.0 a2VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*9.11.0 a3VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*9.11.0 b1VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:b2:*:*:*:*:*:*9.11.0 b2VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:b3:*:*:*:*:*:*9.11.0 b3VulnerableISC
cpe:2.3:a:isc:bind:9.11.0:rc1:*:*:*:*:*:*9.11.0 rc1VulnerableISC
cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*11.31VulnerableHewlett Packard Enterprise
cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*10.0VulnerableOracle
cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*11.3VulnerableOracle
  • cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:* Versions 9.10.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:* Versions 9.10.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:* Versions 9.10.0 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:* Versions 9.10.0 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:* Versions 9.10.0 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:* Versions 9.10.0 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:* Versions 9.10.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:* Versions 9.10.1 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:* Versions 9.10.1 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:* Versions 9.10.1 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:* Versions 9.10.1 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:* Versions 9.10.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:* Versions 9.10.1 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:* Versions 9.10.2 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:* Versions 9.10.2 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:* Versions 9.10.2 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:* Versions 9.10.2 p3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:* Versions 9.10.2 p4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:* Versions 9.10.2 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:* Versions 9.10.2 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:* Versions 9.10.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:* Versions 9.10.3 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:* Versions 9.10.3 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:* Versions 9.10.3 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:* Versions 9.10.3 p3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:p4:*:*:*:*:*:* Versions 9.10.3 p4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:* Versions 9.10.3 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:* Versions 9.10.4 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:* Versions 9.10.4 p3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:* Versions 9.11.0 a1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:* Versions 9.11.0 a2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:* Versions 9.11.0 a3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:* Versions 9.11.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:b2:*:*:*:*:*:* Versions 9.11.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:b3:*:*:*:*:*:* Versions 9.11.0 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.0:rc1:*:*:*:*:*:* Versions 9.11.0 rc1 Vulnerable ·ISC
  • cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:* Versions 11.31 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·Oracle

Remediation

Red Hat 3 advisories

  • RHSA-2016:2099 Released 2016-10-25 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-libs-32:9.8.2-0.30.rc1.el6_6.6, bind-utils-32:9.8.2-0.30.rc1.el6_6.6
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-libs-32:9.8.2-0.37.rc1.el6_7.8, bind-utils-32:9.8.2-0.37.rc1.el6_7.8
    • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-chroot-32:9.8.2-0.30.rc1.el6_6.6, bind-devel-32:9.8.2-0.30.rc1.el6_6.6 +1
    • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-chroot-32:9.8.2-0.37.rc1.el6_7.8, bind-devel-32:9.8.2-0.37.rc1.el6_7.8 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.5, bind-chroot-32:9.7.3-8.P3.el6_2.5, bind-libs-32:9.7.3-8.P3.el6_2.5 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.9, bind-chroot-32:9.8.2-0.17.rc1.el6_4.9, bind-libs-32:9.8.2-0.17.rc1.el6_4.9 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-chroot-32:9.8.2-0.23.rc1.el6_5.4, bind-libs-32:9.8.2-0.23.rc1.el6_5.4 +1
    • Red Hat Enterprise Linux Server EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-chroot-32:9.8.2-0.30.rc1.el6_6.6, bind-libs-32:9.8.2-0.30.rc1.el6_6.6 +2
    • Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-chroot-32:9.8.2-0.37.rc1.el6_7.8, bind-libs-32:9.8.2-0.37.rc1.el6_7.8 +2
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.5, bind-devel-32:9.7.3-8.P3.el6_2.5, bind-sdb-32:9.7.3-8.P3.el6_2.5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.9, bind-devel-32:9.8.2-0.17.rc1.el6_4.9, bind-sdb-32:9.8.2-0.17.rc1.el6_4.9
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-devel-32:9.8.2-0.23.rc1.el6_5.4, bind-sdb-32:9.8.2-0.23.rc1.el6_5.4
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.6, bind-devel-32:9.8.2-0.30.rc1.el6_6.6.ppc, bind-sdb-32:9.8.2-0.30.rc1.el6_6.6
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.8, bind-devel-32:9.8.2-0.37.rc1.el6_7.8.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.8
    • Red Hat Enterprise Linux Server Optional TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-devel-32:9.8.2-0.23.rc1.el6_5.4, bind-sdb-32:9.8.2-0.23.rc1.el6_5.4
    • Red Hat Enterprise Linux Server TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-chroot-32:9.8.2-0.23.rc1.el6_5.4, bind-libs-32:9.8.2-0.23.rc1.el6_5.4 +1
  • RHSA-2016:1944 Released 2016-09-28 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-25.P1.el5_11.9, bind-30:9.3.6-25.P1.el5_11.9.i386, bind-30:9.3.6-25.P1.el5_11.9.ia64 +29
    • Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4, bind-libs-lite-32:9.9.4-29.el7_2.4 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4 +7
    • Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4, bind-libs-lite-32:9.9.4-29.el7_2.4 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4 +7
    • Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-25.P1.el5_11.9, bind-30:9.3.6-25.P1.el5_11.9.i386, bind-libs-30:9.3.6-25.P1.el5_11.9 +5
    • Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1, bind-utils-32:9.8.2-0.47.rc1.el6_8.1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1 +1
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-25.P1.el5_11.9, bind-chroot-30:9.3.6-25.P1.el5_11.9, bind-chroot-30:9.3.6-25.P1.el5_11.9.i386 +6
    • Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1, bind-utils-32:9.8.2-0.47.rc1.el6_8.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1 +1
    • Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1 +2
    • Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4 +8
    • Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1.ppc, bind-sdb-32:9.8.2-0.47.rc1.el6_8.1
    • Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4.ppc, bind-lite-devel-32:9.9.4-29.el7_2.4 +9
    • Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1 +1
    • Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.1, bind-sdb-32:9.8.2-0.47.rc1.el6_8.1
    • Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.4, bind-lite-devel-32:9.9.4-29.el7_2.4, bind-pkcs11-devel-32:9.9.4-29.el7_2.4 +2
  • RHSA-2016:1945 Released 2016-09-28 · Red Hat rating Important
    bind97 security update
    • Red Hat Enterprise Linux (v. 5 server) bind97-32:9.7.0-21.P2.el5_11.7, bind97-32:9.7.0-21.P2.el5_11.7.i386, bind97-32:9.7.0-21.P2.el5_11.7.ia64 +17
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind97-32:9.7.0-21.P2.el5_11.7, bind97-32:9.7.0-21.P2.el5_11.7.i386, bind97-chroot-32:9.7.0-21.P2.el5_11.7 +7

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2016:1944, RHSA-2016:1945
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2016:1944, RHSA-2016:1945
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux HPC Node EUS (v. 6.6)Fixed RHSA-2016:2099
Red Hat Enterprise Linux HPC Node EUS (v. 6.7)Fixed RHSA-2016:2099
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)Fixed RHSA-2016:2099
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Server AUS (v. 6.2)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server AUS (v. 6.4)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server EUS (v. 6.6)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Server Optional AUS (v. 6.2)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional AUS (v. 6.4)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional AUS (v. 6.5)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional EUS (v. 6.6)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional EUS (v. 6.7)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server Optional TUS (v. 6.5)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Server TUS (v. 6.5)Fixed RHSA-2016:2099
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:1944
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2016:1944

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-2776
  2. 2026-10-03 Alias added: GHSA-jxr9-jr43-c424

References

Exploit 1

Advisory 10

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences