{"id":"CVE-2016-2088","details":"resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.","modified":"2026-07-08T22:45:18.053197Z","published":"2016-03-09T23:59:04.493Z","related":["openSUSE-SU-2024:10467-1"],"references":[{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/84290"},{"type":"WEB","url":"http://www.securitytracker.com/id/1035238"},{"type":"WEB","url":"https://kb.isc.org/article/AA-01380"},{"type":"ADVISORY","url":"https://kb.isc.org/article/AA-01351"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201610-07"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/isc-projects/bind9","events":[{"introduced":"63fbb3ea39094353765c04a6066b9e1d1013992a"},{"last_affected":"29904d05643601b44cd88110197411afb0a03230"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.10.0"},{"last_affected":"9.10.0"},{"introduced":"9.10.0-a1"},{"last_affected":"9.10.0-a1"},{"introduced":"9.10.0-b1"},{"last_affected":"9.10.0-b1"},{"introduced":"9.10.0-p1"},{"last_affected":"9.10.0-p1"},{"introduced":"9.10.0-a2"},{"last_affected":"9.10.0-a2"},{"introduced":"9.10.0-b2"},{"last_affected":"9.10.0-b2"},{"introduced":"9.10.0-p2"},{"last_affected":"9.10.0-p2"},{"introduced":"9.10.0-rc1"},{"last_affected":"9.10.0-rc1"},{"introduced":"9.10.0-rc2"},{"last_affected":"9.10.0-rc2"},{"introduced":"9.10.1"},{"last_affected":"9.10.1"},{"introduced":"9.10.1-b1"},{"last_affected":"9.10.1-b1"},{"introduced":"9.10.1-p1"},{"last_affected":"9.10.1-p1"},{"introduced":"9.10.1-b2"},{"last_affected":"9.10.1-b2"},{"introduced":"9.10.1-p2"},{"last_affected":"9.10.1-p2"},{"introduced":"9.10.1-rc1"},{"last_affected":"9.10.1-rc1"},{"introduced":"9.10.1-rc2"},{"last_affected":"9.10.1-rc2"},{"introduced":"9.10.2-b1"},{"last_affected":"9.10.2-b1"},{"introduced":"9.10.2-p1"},{"last_affected":"9.10.2-p1"},{"introduced":"9.10.2-p2"},{"last_affected":"9.10.2-p2"},{"introduced":"9.10.2-p3"},{"last_affected":"9.10.2-p3"},{"introduced":"9.10.2-p4"},{"last_affected":"9.10.2-p4"},{"introduced":"9.10.2-rc1"},{"last_affected":"9.10.2-rc1"},{"introduced":"9.10.2-rc2"},{"last_affected":"9.10.2-rc2"},{"introduced":"9.10.3"},{"last_affected":"9.10.3"},{"introduced":"9.10.3-b1"},{"last_affected":"9.10.3-b1"},{"introduced":"9.10.3-p1"},{"last_affected":"9.10.3-p1"},{"introduced":"9.10.3-p2"},{"last_affected":"9.10.3-p2"},{"introduced":"9.10.3-p3"},{"last_affected":"9.10.3-p3"},{"introduced":"9.10.3-rc1"},{"last_affected":"9.10.3-rc1"}],"source":"CPE_STRING"}}],"versions":["9.10.0","9.10.0-a1","9.10.0-a2","9.10.0-rc1","9.10.0-rc2","9.10.1","9.10.1-b1","9.10.1-b2","9.10.1-rc1","9.10.1-rc2","9.10.2-b1","9.10.2-p2","9.10.2-p3","9.10.2-p4","9.10.2-rc1","9.10.2-rc2","9.10.3","9.10.3-b1","9.10.3-p2","9.10.3-p3","9.10.3-rc1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2088.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/bind9","events":[{"introduced":"63fbb3ea39094353765c04a6066b9e1d1013992a"},{"last_affected":"29904d05643601b44cd88110197411afb0a03230"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.10.0"},{"last_affected":"9.10.0"},{"introduced":"9.10.0-a1"},{"last_affected":"9.10.0-a1"},{"introduced":"9.10.0-b1"},{"last_affected":"9.10.0-b1"},{"introduced":"9.10.0-p1"},{"last_affected":"9.10.0-p1"},{"introduced":"9.10.0-a2"},{"last_affected":"9.10.0-a2"},{"introduced":"9.10.0-b2"},{"last_affected":"9.10.0-b2"},{"introduced":"9.10.0-p2"},{"last_affected":"9.10.0-p2"},{"introduced":"9.10.0-rc1"},{"last_affected":"9.10.0-rc1"},{"introduced":"9.10.0-rc2"},{"last_affected":"9.10.0-rc2"},{"introduced":"9.10.1"},{"last_affected":"9.10.1"},{"introduced":"9.10.1-b1"},{"last_affected":"9.10.1-b1"},{"introduced":"9.10.1-p1"},{"last_affected":"9.10.1-p1"},{"introduced":"9.10.1-b2"},{"last_affected":"9.10.1-b2"},{"introduced":"9.10.1-p2"},{"last_affected":"9.10.1-p2"},{"introduced":"9.10.1-rc1"},{"last_affected":"9.10.1-rc1"},{"introduced":"9.10.1-rc2"},{"last_affected":"9.10.1-rc2"},{"introduced":"9.10.2-b1"},{"last_affected":"9.10.2-b1"},{"introduced":"9.10.2-p1"},{"last_affected":"9.10.2-p1"},{"introduced":"9.10.2-p2"},{"last_affected":"9.10.2-p2"},{"introduced":"9.10.2-p3"},{"last_affected":"9.10.2-p3"},{"introduced":"9.10.2-p4"},{"last_affected":"9.10.2-p4"},{"introduced":"9.10.2-rc1"},{"last_affected":"9.10.2-rc1"},{"introduced":"9.10.2-rc2"},{"last_affected":"9.10.2-rc2"},{"introduced":"9.10.3"},{"last_affected":"9.10.3"},{"introduced":"9.10.3-b1"},{"last_affected":"9.10.3-b1"},{"introduced":"9.10.3-p1"},{"last_affected":"9.10.3-p1"},{"introduced":"9.10.3-p2"},{"last_affected":"9.10.3-p2"},{"introduced":"9.10.3-p3"},{"last_affected":"9.10.3-p3"},{"introduced":"9.10.3-rc1"},{"last_affected":"9.10.3-rc1"}],"source":"CPE_STRING"}}],"versions":["9.10.0","9.10.0-a1","9.10.0-a2","9.10.0-rc1","9.10.0-rc2","9.10.1","9.10.1-b1","9.10.1-b2","9.10.1-rc1","9.10.1-rc2","9.10.2-b1","9.10.2-p2","9.10.2-p3","9.10.2-p4","9.10.2-rc1","9.10.2-rc2","9.10.3","9.10.3-b1","9.10.3-p2","9.10.3-p3","9.10.3-rc1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2088.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"}]}