Denial of Service in ISC products - CVE-2016-2776

Vulnerability identifier: #VU703

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-2776

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allow a remote unauthenticated user to cause denial of service (DoS) on the target system.
The weakness exists due to improper construction of queries responses, which meet certain criteria. By sending specially crafted query to the target service the attacker can trigger an assertion failure in buffer.c that leads to crash and denial of the service.
Successful exploitation of the vulnerability results in DoS condeitions on the vulnerable system.

Oracle VM Server for x86
Dell EMC Unisphere Central
Oracle Linux
Oracle Solaris
Arch Linux
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Ubuntu
Slackware Linux
Fedora
ISC BIND
bind (Alpine package)
bind99
bind

Apply the following patches:

• BIND 9 version 9.9.9-P3
• BIND 9 version 9.10.4-P3
• BIND 9 version 9.11.0rc3

bind (Alpine package) - update to 9.10.4_p3-r0
Dell EMC Unisphere Central - update to 4.0.7
bind99 - addressed in versions 9.9.9-2.P3.fc23, 9.9.9-2.P3.fc24, 9.9.9-2.P3.fc25
bind - addressed in versions 9.10.4-2.P3.fc23, 9.10.4-2.P3.fc24, 9.10.4-2.P3.fc25

• Exploit #10 - BIND TKEY Query Denial of Service (March 18, 2020)
• Exploit #410 - ISC BIND 9 - Denial of Service (March 18, 2020)

• https://kb.isc.org/article/AA-01419
• http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

• Denial of service in ISC Bind
• Ubuntu update for Bind
• Arch Linux update for bind
• Slackware Linux update for bind
• OpenSUSE Linux update for bind
• SUSE Linux update for bind
• SUSE Linux update for bind
• SUSE Linux update for bind
• Red Hat update for bind
• Red Hat update for bind97
• Red Hat update for bind
• Denial of Service in bind (Alpine package)
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Fedora 23 update for bind
• Fedora 24 update for bind
• Fedora 25 update for bind
• Fedora 24 update for bind99
• Fedora 23 update for bind99
• Fedora 25 update for bind99