CVE-2015-8461

2015-12-1615:59:00

CWE-362

[email protected]

web.nvd.nist.gov

418

cve-2015-8461

isc bind

named

resolver.c

denial of service

vulnerability

nvd

7.1 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.123 Low

EPSS

Percentile

95.4%

JSON

Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.

CPENameOperatorVersion
isc:bindisc bindeq9.8.6
isc:bindisc bindeq9.9.3
isc:bindisc bindeq9.6.1
isc:bindisc bindeq9.8.4
isc:bindisc bindeq9.8.1
isc:bindisc bindeq9.8.3
isc:bindisc bindeq9.10.2
isc:bindisc bindeq9.1.1
isc:bindisc bindeq8.4.7
isc:bindisc bindeq9.7.5

CPE	Name	Operator	Version
isc:bind	isc bind	eq	9.8.6
isc:bind	isc bind	eq	9.9.3
isc:bind	isc bind	eq	9.6.1
isc:bind	isc bind	eq	9.8.4
isc:bind	isc bind	eq	9.8.1
isc:bind	isc bind	eq	9.8.3
isc:bind	isc bind	eq	9.10.2
isc:bind	isc bind	eq	9.1.1
isc:bind	isc bind	eq	8.4.7
isc:bind	isc bind	eq	9.7.5