CVE-2015-1349

2015-02-1800:00:00

ubuntu.com

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.069 Low

EPSS

Percentile

93.9%

JSON

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before
9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled,
allows remote attackers to cause a denial of service (assertion failure and
daemon exit, or daemon crash) by triggering an incorrect trust-anchor
management scenario in which no key is ready for use.

Notes

Author	Note
mdeslaur	code in lucid doesn’t look vulnerable

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchbind9< 1:9.8.1.dfsg.P1-4ubuntu0.10UNKNOWN
ubuntu14.04noarchbind9< 1:9.9.5.dfsg-3ubuntu0.2UNKNOWN
ubuntu14.10noarchbind9< 1:9.9.5.dfsg-4.3ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	bind9	< 1:9.8.1.dfsg.P1-4ubuntu0.10	UNKNOWN
ubuntu	14.04	noarch	bind9	< 1:9.9.5.dfsg-3ubuntu0.2	UNKNOWN
ubuntu	14.10	noarch	bind9	< 1:9.9.5.dfsg-4.3ubuntu0.2	UNKNOWN