named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of se…

published 2017-01-12 9 y ago modified 2026-06-17 4 mo ago also EUVD-2016-10254

cvss: 7.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 18.1%; EPSS 18.1% chance of exploitation in 30 days, percentile 97%
public exploits: 0; none known

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.

Patch / fix

fixed in 1 distros 6 links 1

isc bind 9.9.9-P5, 9.10.4-P5, 9.11.0-P2

debian ubuntu red hat suse alpine arch linux

bind9 Debian 14, Debian 13, Debian 12 1:9.10.3.dfsg.P4-11

debian advisories DEBIAN-CVE-2016-9444

bind9 Ubuntu 14.04 LTS 1:9.9.5.dfsg-3ubuntu0.11
bind9 Ubuntu 16.04 LTS 1:9.10.3.dfsg.P4-8ubuntu1.4

ubuntu advisories UBUNTU-CVE-2016-9444

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

bind RHEL 7 32:9.9.4-38.el7_3.1
bind-sdb RHEL 7 32:9.9.4-38.el7_3.1
bind-libs RHEL 7 32:9.9.4-38.el7_3.1
bind-utils RHEL 7 32:9.9.4-38.el7_3.1
bind-chroot RHEL 7 32:9.9.4-38.el7_3.1
bind-pkcs11 RHEL 7 32:9.9.4-38.el7_3.1
bind-license RHEL 7 32:9.9.4-38.el7_3.1
bind-libs-lite RHEL 7 32:9.9.4-38.el7_3.1

red hat advisories RHSA-2017:1583 RHSA-2017:0062

bind SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +7 more 9.9.6P1-0.36.1
bind SLES for SAP 12 SP2, SLES for SAP 12 SP1, SLES for Raspberry Pi 12 SP2 +6 more 9.9.9P1-53.1
bind SLES for SAP 12, SLES 12-LTSS 9.9.9P1-28.26.1

suse advisories SUSE-SU-2017:0112-1 SUSE-SU-2017:0111-1 SUSE-SU-2017:0113-1

bind Alpine 3.24, Alpine 3.23, Alpine 3.22 +20 more 9.10.4_p5-r0

alpine advisories ALPINE-CVE-2016-9444

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

bind Arch Linux 9.11.0.P2-1

arch linux advisories AVG-132

kb.isc.org/article/AA-01441/74/CVE-2016-9444 advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-9444 updated 2026-11-04 cvss 7.5

bind: assertion failure while handling an unusually-formed DS record response

Red Hat Enterprise Linux Client (v. 7) bind 9.9.4-38.el7_3.1, bind-libs 9.9.4-38.el7_3.1, bind-utils 9.9.4-38.el7_3.1, bind-license 9.9.4-38.el7_3.1, bind-libs-lite 9.9.4-38.el7_3.1 Red Hat Enterprise Linux Client Optional (v. 7) bind 9.9.4-38.el7_3.1, bind-sdb 9.9.4-38.el7_3.1, bind-chroot 9.9.4-38.el7_3.1, bind-pkcs11 9.9.4-38.el7_3.1, bind-sdb-chroot 9.9.4-38.el7_3.1, bind-pkcs11-libs 9.9.4-38.el7_3.1, +1 more Red Hat Enterprise Linux ComputeNode (v. 7) bind 9.9.4-38.el7_3.1, bind-libs 9.9.4-38.el7_3.1, bind-utils 9.9.4-38.el7_3.1, bind-license 9.9.4-38.el7_3.1, bind-libs-lite 9.9.4-38.el7_3.1
fixed: vendor fix RHSA-2017:0062
Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) bind 9.9.4-29.el7_2.6, bind-libs 9.9.4-29.el7_2.6, bind-utils 9.9.4-29.el7_2.6, bind-license 9.9.4-29.el7_2.6, bind-libs-lite 9.9.4-29.el7_2.6
fixed: vendor fix RHSA-2017:1583
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind 9.9.4-38.el7_3.1, bind-sdb 9.9.4-38.el7_3.1, bind-chroot 9.9.4-38.el7_3.1, bind-pkcs11 9.9.4-38.el7_3.1, bind-sdb-chroot 9.9.4-38.el7_3.1, bind-pkcs11-libs 9.9.4-38.el7_3.1, +1 more
fixed: vendor fix RHSA-2017:0062
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) bind 9.9.4-29.el7_2.6, bind-sdb 9.9.4-29.el7_2.6, bind-chroot 9.9.4-29.el7_2.6, bind-pkcs11 9.9.4-29.el7_2.6, bind-sdb-chroot 9.9.4-29.el7_2.6, bind-pkcs11-libs 9.9.4-29.el7_2.6, +1 more
fixed: vendor fix RHSA-2017:1583
Red Hat Enterprise Linux Server (v. 7) bind 9.9.4-38.el7_3.1, bind-libs 9.9.4-38.el7_3.1, bind-utils 9.9.4-38.el7_3.1, bind-chroot 9.9.4-38.el7_3.1, bind-pkcs11 9.9.4-38.el7_3.1, bind-license 9.9.4-38.el7_3.1, +3 more
fixed: vendor fix RHSA-2017:0062
Red Hat Enterprise Linux Server EUS (v. 7.2) bind 9.9.4-29.el7_2.6, bind-libs 9.9.4-29.el7_2.6, bind-utils 9.9.4-29.el7_2.6, bind-chroot 9.9.4-29.el7_2.6, bind-pkcs11 9.9.4-29.el7_2.6, bind-license 9.9.4-29.el7_2.6, +3 more
fixed: vendor fix RHSA-2017:1583
Red Hat Enterprise Linux Server Optional (v. 7) bind-sdb 9.9.4-38.el7_3.1, bind-pkcs11 9.9.4-38.el7_3.1, bind-sdb-chroot 9.9.4-38.el7_3.1, bind-pkcs11-libs 9.9.4-38.el7_3.1, bind-pkcs11-utils 9.9.4-38.el7_3.1
fixed: vendor fix RHSA-2017:0062
Red Hat Enterprise Linux Server Optional EUS (v. 7.2) bind-sdb 9.9.4-29.el7_2.6, bind-pkcs11 9.9.4-29.el7_2.6, bind-sdb-chroot 9.9.4-29.el7_2.6, bind-pkcs11-libs 9.9.4-29.el7_2.6, bind-pkcs11-utils 9.9.4-29.el7_2.6
fixed: vendor fix RHSA-2017:1583

show 2 more

Red Hat Enterprise Linux Workstation (v. 7) bind 9.9.4-38.el7_3.1, bind-libs 9.9.4-38.el7_3.1, bind-utils 9.9.4-38.el7_3.1, bind-chroot 9.9.4-38.el7_3.1, bind-pkcs11 9.9.4-38.el7_3.1, bind-license 9.9.4-38.el7_3.1, +3 more Red Hat Enterprise Linux Workstation Optional (v. 7) bind-sdb 9.9.4-38.el7_3.1, bind-sdb-chroot 9.9.4-38.el7_3.1
fixed: vendor fix RHSA-2017:0062
Red Hat Enterprise Linux 5 bind, bind97 Red Hat Enterprise Linux 6 bind, bind-sdb, bind-libs, bind-utils, bind-chroot
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

18.12% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	3.0	7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness

CWE-20 Improper Input Validation

References

kb.isc.org /article/AA-01441/74/CVE-2016-9444
patch, vendor-advisory
security.gentoo.org /glsa/201708-01
vendor-advisory
debian.org /security/2017/dsa-3758
vendor-advisory
access.redhat.com /errata/RHSA-2017:1583
vendor-advisory
rhn.redhat.com /errata/RHSA-2017-0062.html
vendor-advisory
securityfocus.com /bid/95393
vdb-entry
securitytracker.com /id/1037582
vdb-entry
security.netapp.com /advisory/ntap-20180926-0005/
h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687

Sources

CVE List CVE-2016-9444
NVD CVE-2016-9444

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Consolidate version constraints.

Summary