ALPINE-CVE-2016-2776 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2016-2776 PUBLISHED CVSS 7.5 HIGH

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Risk Scores

CVSS v3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.2	bind	0, 9.10.0-r0, 9.10.0_p1-r0
Alpine:v3.3	bind	0, 9.10.0-r0, *

Timeline

Sep 28, 2016 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2016-2776 advisory

Open in Interactive Console →