Ubuntu.comUB:CVE-2015-5722CVE-2015-5722
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.966 High
EPSS
Percentile
99.6%
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before
9.10.2-P4 allows remote attackers to cause a denial of service (assertion
failure and daemon exit) by creating a zone containing a malformed DNSSEC
key and issuing a query for a name in that zone.
References
launchpad.net/bugs/cve/CVE-2015-5722
nvd.nist.gov/vuln/detail/CVE-2015-5722
security-tracker.debian.org/tracker/CVE-2015-5722
ubuntu.com/security/notices/USN-2728-1
www.cve.org/CVERecord?id=CVE-2015-5722
www.isc.org/blogs/cve-2015-5722-parsing-malformed-keys-may-cause-bind-to-exit-due-to-a-failed-assertion-in-buffer-c/
Related
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.966 High
EPSS
Percentile
99.6%