What is CVE-2016-2775?

CVE-2016-2775 is a medium-severity vulnerability in Hp Hp-ux, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2016-07-19.

How severe is CVE-2016-2775?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Is CVE-2016-2775 known to be exploited?

14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Hp Hp-ux

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the light…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.433 (97.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Hp Hp-ux — versions b.11.31
Isc Bind — versions 9.9.9, 9.10.4, 9.11.0
Fedoraproject Fedora — versions 23, 24
Redhat Enterprise_linux_desktop — versions 6.0, 7.0
Redhat Enterprise_linux_eus — versions 7.2, 7.3, 7.4
Redhat Enterprise_linux_server — versions 6.0, 7.0
Redhat Enterprise_linux_server_aus — versions 7.2, 7.3, 7.6
Redhat Enterprise_linux_server_tus — versions 7.2, 7.3, 7.6
Redhat Enterprise_linux_workstation — versions 6.0, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

FEDORA-2016-53f0c65f40 (x_refsource_FEDORA, vendor-advisory)
cve@mitre.org (x_refsource_CONFIRM, Broken Link)
RHBA-2017:1767 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
FEDORA-2016-3fba74e7f5 (x_refsource_FEDORA, vendor-advisory)
92037 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
GLSA-201610-07 (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
cve@mitre.org (x_refsource_CONFIRM, Broken Link)
RHBA-2017:0651 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
FEDORA-2016-2941b3264e (x_refsource_FEDORA, vendor-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-2775?: CVE-2016-2775 is a medium-severity vulnerability in Hp Hp-ux, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2016-07-19.
How severe is CVE-2016-2775?: Medium severity. CVSS v3 base score is 5.9 out of 10.
Is CVE-2016-2775 known to be exploited?: 14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.