vulnerability
FreeBSD: VID-7d08e608-5e95-11e6-b334-002590263bf5 (CVE-2016-6173): BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfers
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Aug 10, 2016 | Dec 10, 2025 | Dec 10, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 10, 2016
Added
Dec 10, 2025
Modified
Dec 10, 2025
Description
ISC reports: DNS protocols were designed with the assumption that a certain amount of trust could be presumed between the operators of primary and secondary servers for a given zone. However, in current practice some organizations have scenarios which require them to accept zone data from sources that are not fully trusted (for example: providers of secondary name service). A party who is allowed to feed data into a zone (e.g. by AXFR, IXFR, or Dynamic DNS updates) can overwhelm the server which is accepting data by intentionally or accidentally exhausting that server's memory.
Solutions
freebsd-upgrade-package-bind99freebsd-upgrade-package-bind910freebsd-upgrade-package-bind911freebsd-upgrade-package-bind9-develfreebsd-upgrade-package-knotfreebsd-upgrade-package-knot1freebsd-upgrade-package-knot2freebsd-upgrade-package-nsdfreebsd-upgrade-package-powerdns
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.