CVE-2016-6173 Denial of service in n/a
Remote DNS master servers can cause denial of service in NSD slave servers via zone transfers with unlimited data, leading to disk consumption and crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-6173?
CVE-2016-6173 is a high-severity denial of service vulnerability in n/a, published on 9 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data.
Weakness: CWE-399
Which versions are affected by CVE-2016-6173?
It affects 1 product.
Products include Nlnetlabs Nsd.
How do I fix CVE-2016-6173?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-6173 being exploited?
There is no known exploitation of CVE-2016-6173 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-12244 Heap overflow and crash with crafted SVCB RR
- CVE-2026-12245 Denial of DNS over TLS service by any DoT client
- CVE-2026-18664 Wrong interpretation of ACL ranges
- CVE-2026-19401 Remote UDP DoS by sending multiple DNS Cookie options
- CVE-2026-19538 Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
Sources
Also known as DEBIAN-CVE-2016-6173, GHSA-h7fr-j2jh-7mww, UBUNTU-CVE-2016-6173.