CVE-2016-6171

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR.

• CWE-400

• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91678Third Party Advisory, VDB Entry
• https://github.com/sischkg/xfer-limit/blob/master/README.mdPatch, Third Party Advisory
• https://gitlab.labs.nic.cz/labs/knot/blob/c546a70563ef4c7badb7cb5bdf6d1ba8e7adae82/NEWSRelease Notes, VDB Entry
• https://gitlab.labs.nic.cz/labs/knot/issues/464Vendor Advisory
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlTechnical Description
• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91678Third Party Advisory, VDB Entry
• https://github.com/sischkg/xfer-limit/blob/master/README.mdPatch, Third Party Advisory
• https://gitlab.labs.nic.cz/labs/knot/blob/c546a70563ef4c7badb7cb5bdf6d1ba8e7adae82/NEWSRelease Notes, VDB Entry
• https://gitlab.labs.nic.cz/labs/knot/issues/464Vendor Advisory
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlTechnical Description

Published

Feb 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6163The rsvg_pattern_fix_fallback function in rsvg-paint_server.…
• CVE-2016-6164Integer overflow in the mov_build_index function in libavfor…
• CVE-2016-6167Multiple untrusted search path vulnerabilities in Putty beta…7.8
• CVE-2016-6168Use-after-free vulnerability in Foxit Reader and PhantomPDF …
• CVE-2016-6169Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.…
• CVE-2016-6170ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.1…6.5
• CVE-2016-6172PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows…
• CVE-2016-6173NSD before 4.1.11 allows remote DNS master servers to cause …
• CVE-2016-6174applications/core/modules/front/system/content.php in Invisi…
• CVE-2016-6175Eval injection vulnerability in php-gettext 1.0.12 and earli…
• CVE-2016-6177The Huawei OceanStor 5800 V300R003C00 has an integer overflo…
• CVE-2016-6178Huawei NE40E and CX600 devices with software before V800R007…