CVE-2016-6173

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data.

• CWE-399

• http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_1_11_REL/doc/RELNOTESRelease Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91678Third Party Advisory, VDB Entry
• https://github.com/sischkg/xfer-limit/blob/master/README.mdThird Party Advisory
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlThird Party Advisory
• https://open.nlnetlabs.nl/pipermail/nsd-users/2016-August/002342.htmlRelease Notes, Vendor Advisory
• https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=790Issue Tracking
• http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_1_11_REL/doc/RELNOTESRelease Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91678Third Party Advisory, VDB Entry
• https://github.com/sischkg/xfer-limit/blob/master/README.mdThird Party Advisory
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlThird Party Advisory
• https://open.nlnetlabs.nl/pipermail/nsd-users/2016-August/002342.htmlRelease Notes, Vendor Advisory
• https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=790Issue Tracking

Published

Feb 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6167Multiple untrusted search path vulnerabilities in Putty beta…7.8
• CVE-2016-6168Use-after-free vulnerability in Foxit Reader and PhantomPDF …
• CVE-2016-6169Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.…
• CVE-2016-6170ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.1…6.5
• CVE-2016-6171Knot DNS before 2.3.0 allows remote DNS servers to cause a d…8.6
• CVE-2016-6172PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows…
• CVE-2016-6174applications/core/modules/front/system/content.php in Invisi…
• CVE-2016-6175Eval injection vulnerability in php-gettext 1.0.12 and earli…
• CVE-2016-6177The Huawei OceanStor 5800 V300R003C00 has an integer overflo…
• CVE-2016-6178Huawei NE40E and CX600 devices with software before V800R007…
• CVE-2016-6179The WiFi driver in Huawei Honor 6 smartphones with software …
• CVE-2016-6180The Camera driver in Huawei Honor 4C smartphones with softwa…