CVE-2016-6170: ISC BIND

Medium severity, CVSS 6.5. EPSS: 40.9% chance of exploitation in the next 30 days.

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.

Affected products

• ISC BIND: from 9.0, up to and including 9.9.8; from 9.10.0, up to and including 9.10.3; version 9.9.9 only; version 9.10.4 only; version 9.11.0 only
• Red Hat Enterprise Linux: version 5.0 only; version 6.0 only; version 7.0 only

Published 2016-07-06. Last modified 2026-06-17.