ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows…

published 2016-07-19 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-3849

cvss: 5.9; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 63.3%; EPSS 63.3% chance of exploitation in 30 days, percentile 99.2%
public exploits: 0; none known

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

Patch / fix

distros 5 links 2

debian ubuntu red hat suse opensuse

bind9 Debian 14, Debian 13, Debian 12 1:9.10.3.dfsg.P4-11

debian advisories DEBIAN-CVE-2016-2775

bind9 Ubuntu Pro 14.04 LTS 1:9.9.5.dfsg-3ubuntu0.19+esm9
bind9 Ubuntu Pro 16.04 LTS 1:9.10.3.dfsg.P4-8ubuntu1.19+esm5

ubuntu advisories UBUNTU-CVE-2016-2775

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

bind RHEL 6 32:9.8.2-0.62.rc1.el6
bind-sdb RHEL 6 32:9.8.2-0.62.rc1.el6
bind-libs RHEL 6 32:9.8.2-0.62.rc1.el6
bind-utils RHEL 6 32:9.8.2-0.62.rc1.el6
bind-chroot RHEL 6 32:9.8.2-0.62.rc1.el6
bind RHEL 7 32:9.9.4-50.el7
bind-sdb RHEL 7 32:9.9.4-50.el7
bind-libs RHEL 7 32:9.9.4-50.el7

red hat advisories RHSA-2017:2533 RHBA-2017:0651 RHBA-2017:1767

bind SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +6 more 9.9.6P1-0.44.1
bind SLES for SAP 12 SP2, SLES for SAP 12 SP1, SLES for Raspberry Pi 12 SP2 +6 more 9.9.9P1-59.1
bind SLES for SAP 12, SLES 12-LTSS 9.9.9P1-28.34.1

suse advisories SUSE-SU-2017:1000-1 SUSE-SU-2017:0998-1 SUSE-SU-2017:0999-1

bind openSUSE Tumbleweed 9.16.20-1.4

opensuse advisories openSUSE-SU-2024:10650-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-2775 updated 2026-11-05 cvss 5.9

bind: Too long query name causes segmentation fault in lwresd

Red Hat Enterprise Linux 5 bind, bind97
affected: no fix planned “Will not fix”
Red Hat Enterprise Linux Client (v. 7) bind 9.9.4-50.el7, bind-libs 9.9.4-50.el7, bind-utils 9.9.4-50.el7, bind-license 9.9.4-50.el7, bind-libs-lite 9.9.4-50.el7 Red Hat Enterprise Linux Client Optional (v. 7) bind 9.9.4-50.el7, bind-sdb 9.9.4-50.el7, bind-chroot 9.9.4-50.el7, bind-pkcs11 9.9.4-50.el7, bind-sdb-chroot 9.9.4-50.el7, bind-pkcs11-libs 9.9.4-50.el7, +1 more Red Hat Enterprise Linux ComputeNode (v. 7) bind 9.9.4-50.el7, bind-libs 9.9.4-50.el7, bind-utils 9.9.4-50.el7, bind-license 9.9.4-50.el7, bind-libs-lite 9.9.4-50.el7
fixed: vendor fix RHBA-2017:1767
Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) bind 9.9.4-29.el7_2.7, bind-libs 9.9.4-29.el7_2.7, bind-utils 9.9.4-29.el7_2.7, bind-license 9.9.4-29.el7_2.7, bind-libs-lite 9.9.4-29.el7_2.7 Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) bind 9.9.4-50.el7_3.2, bind-libs 9.9.4-50.el7_3.2, bind-utils 9.9.4-50.el7_3.2, bind-license 9.9.4-50.el7_3.2, bind-libs-lite 9.9.4-50.el7_3.2
fixed: vendor fix RHSA-2017:2533
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind 9.9.4-50.el7, bind-sdb 9.9.4-50.el7, bind-chroot 9.9.4-50.el7, bind-pkcs11 9.9.4-50.el7, bind-sdb-chroot 9.9.4-50.el7, bind-pkcs11-libs 9.9.4-50.el7, +1 more
fixed: vendor fix RHBA-2017:1767
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) bind 9.9.4-29.el7_2.7, bind-sdb 9.9.4-29.el7_2.7, bind-chroot 9.9.4-29.el7_2.7, bind-pkcs11 9.9.4-29.el7_2.7, bind-sdb-chroot 9.9.4-29.el7_2.7, bind-pkcs11-libs 9.9.4-29.el7_2.7, +1 more Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) bind 9.9.4-50.el7_3.2, bind-sdb 9.9.4-50.el7_3.2, bind-chroot 9.9.4-50.el7_3.2, bind-pkcs11 9.9.4-50.el7_3.2, bind-sdb-chroot 9.9.4-50.el7_3.2, bind-pkcs11-libs 9.9.4-50.el7_3.2, +1 more
fixed: vendor fix RHSA-2017:2533
Red Hat Enterprise Linux Desktop (v. 6) bind 9.8.2-0.62.rc1.el6, bind-libs 9.8.2-0.62.rc1.el6, bind-utils 9.8.2-0.62.rc1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) bind 9.8.2-0.62.rc1.el6, bind-sdb 9.8.2-0.62.rc1.el6, bind-chroot 9.8.2-0.62.rc1.el6 Red Hat Enterprise Linux HPC Node (v. 6) bind 9.8.2-0.62.rc1.el6, bind-libs 9.8.2-0.62.rc1.el6, bind-utils 9.8.2-0.62.rc1.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) bind 9.8.2-0.62.rc1.el6, bind-sdb 9.8.2-0.62.rc1.el6, bind-chroot 9.8.2-0.62.rc1.el6 Red Hat Enterprise Linux Server (v. 6) bind 9.8.2-0.62.rc1.el6, bind-libs 9.8.2-0.62.rc1.el6, bind-utils 9.8.2-0.62.rc1.el6, bind-chroot 9.8.2-0.62.rc1.el6
fixed: vendor fix RHBA-2017:0651
Red Hat Enterprise Linux Server (v. 7) bind 9.9.4-50.el7, bind-libs 9.9.4-50.el7, bind-utils 9.9.4-50.el7, bind-chroot 9.9.4-50.el7, bind-pkcs11 9.9.4-50.el7, bind-license 9.9.4-50.el7, +3 more
fixed: vendor fix RHBA-2017:1767
Red Hat Enterprise Linux Server EUS (v. 7.2) bind 9.9.4-29.el7_2.7, bind-libs 9.9.4-29.el7_2.7, bind-utils 9.9.4-29.el7_2.7, bind-chroot 9.9.4-29.el7_2.7, bind-pkcs11 9.9.4-29.el7_2.7, bind-license 9.9.4-29.el7_2.7, +3 more Red Hat Enterprise Linux Server EUS (v. 7.3) bind 9.9.4-50.el7_3.2, bind-libs 9.9.4-50.el7_3.2, bind-utils 9.9.4-50.el7_3.2, bind-chroot 9.9.4-50.el7_3.2, bind-pkcs11 9.9.4-50.el7_3.2, bind-license 9.9.4-50.el7_3.2, +3 more
fixed: vendor fix RHSA-2017:2533

show 7 more

Red Hat Enterprise Linux Server Optional (v. 6) bind-sdb 9.8.2-0.62.rc1.el6
fixed: vendor fix RHBA-2017:0651
Red Hat Enterprise Linux Server Optional (v. 7) bind-sdb 9.9.4-50.el7, bind-pkcs11 9.9.4-50.el7, bind-sdb-chroot 9.9.4-50.el7, bind-pkcs11-libs 9.9.4-50.el7, bind-pkcs11-utils 9.9.4-50.el7
fixed: vendor fix RHBA-2017:1767
Red Hat Enterprise Linux Server Optional EUS (v. 7.2) bind-sdb 9.9.4-29.el7_2.7, bind-pkcs11 9.9.4-29.el7_2.7, bind-sdb-chroot 9.9.4-29.el7_2.7, bind-pkcs11-libs 9.9.4-29.el7_2.7, bind-pkcs11-utils 9.9.4-29.el7_2.7 Red Hat Enterprise Linux Server Optional EUS (v. 7.3) bind-sdb 9.9.4-50.el7_3.2, bind-pkcs11 9.9.4-50.el7_3.2, bind-sdb-chroot 9.9.4-50.el7_3.2, bind-pkcs11-libs 9.9.4-50.el7_3.2, bind-pkcs11-utils 9.9.4-50.el7_3.2
fixed: vendor fix RHSA-2017:2533
Red Hat Enterprise Linux Workstation (v. 6) bind 9.8.2-0.62.rc1.el6, bind-libs 9.8.2-0.62.rc1.el6, bind-utils 9.8.2-0.62.rc1.el6, bind-chroot 9.8.2-0.62.rc1.el6
fixed: vendor fix RHBA-2017:0651
Red Hat Enterprise Linux Workstation (v. 7) bind 9.9.4-50.el7, bind-libs 9.9.4-50.el7, bind-utils 9.9.4-50.el7, bind-chroot 9.9.4-50.el7, bind-pkcs11 9.9.4-50.el7, bind-license 9.9.4-50.el7, +3 more
fixed: vendor fix RHBA-2017:1767
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-sdb 9.8.2-0.62.rc1.el6
fixed: vendor fix RHBA-2017:0651
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-sdb 9.9.4-50.el7, bind-sdb-chroot 9.9.4-50.el7
fixed: vendor fix RHBA-2017:1767

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

63.35% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:N/I:N/A:P

Classification

Weakness

CWE-20 Improper Input Validation

References

kb.isc.org /article/AA-01393/74/CVE-2016-2775
patch, vendor-advisory
h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107
patch, vendor-advisory
lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/
vendor-advisory
access.redhat.com /errata/RHBA-2017:1767
vendor-advisory, third-party-advisory
lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/
vendor-advisory
security.gentoo.org /glsa/201610-07
vendor-advisory, third-party-advisory
access.redhat.com /errata/RHBA-2017:0651
vendor-advisory, third-party-advisory
lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/
vendor-advisory
lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/
vendor-advisory
access.redhat.com /errata/RHSA-2017:2533
vendor-advisory, third-party-advisory
kb.isc.org /article/AA-01438
broken-link
securityfocus.com /bid/92037
vdb-entry, third-party-advisory
kb.isc.org /article/AA-01435
broken-link
securitytracker.com /id/1036360
vdb-entry, third-party-advisory
kb.isc.org /article/AA-01436
broken-link
security.netapp.com /advisory/ntap-20160722-0002/
third-party-advisory

Sources

CVE List CVE-2016-2775
NVD CVE-2016-2775

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary