CVE-2016-2088

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion…

published March 9, 2016

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22793 · 97.7th percentile
Published
2016-03-09T23:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 23% → 8%
    epss
  • 06 SEP 03:09Z
    EPSS moved 23% → 8%
    epss
  • 30 AUG 15:31Z
    EPSS moved 8% → 23%
    epss
  • 29 AUG 04:10Z
    EPSS moved 23% → 8%
    epss
  • 09 MAR 23:00Z
    resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion…
    cvelistv5