<p>Upgrade <code>Centos:7</code> <code>bind-license</code> to version 32:9.9.4-50.el7 or higher.</p>

Improper Input Validation Affecting bind-license package, versions <32:9.9.4-50.el7

Snyk CVSS

Attack Complexity High

Availability High

Threat Intelligence

EPSS 93.44% (100^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-CENTOS7-BINDLICENSE-2029835
published 26 Jul 2021
disclosed 18 Jul 2016

Report a new vulnerability Found a mistake?

Introduced: 18 Jul 2016

CVE-2016-2775 Open this link in a new tab CWE-20 Open this link in a new tab

How to fix?

Upgrade Centos:7 bind-license to version 32:9.9.4-50.el7 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream bind-license package and not the bind-license package as distributed by Centos. See How to fix? for Centos:7 relevant fixed versions and status.

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.