CVE-2015-4620
- State
- Published
- Severity
- Not scored
- Published
- Jul 8, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jun 16, 2015
Description
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2015-11484vendor-advisory
- openSUSE-SU-2015:1326vendor-advisory
- https://kb.juniper.net/JSA10783
- https://kb.isc.org/article/AA-01438
- 1032799vdb-entry
- USN-2669-1vendor-advisory
- SUSE-SU-2015:1205vendor-advisory
- openSUSE-SU-2015:1250vendor-advisory
- RHSA-2015:1471vendor-advisory
- RHSA-2015:1443vendor-advisory
- DSA-3304vendor-advisory
- https://kb.isc.org/article/AA-01307
- https://kc.mcafee.com/corporate/index?page=content&id=SB10124
- https://kb.isc.org/article/AA-01267
- 75588vdb-entry
- GLSA-201510-01vendor-advisory
- HPSBUX03379vendor-advisory
- FEDORA-2015-11483vendor-advisory
- https://kb.isc.org/article/AA-01305
- https://kb.isc.org/article/AA-01306
- https://security.netapp.com/advisory/ntap-20190903-0003/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.