CVE Database
/

CVE-2015-4620

Back to search

CVE-2015-4620

Published: Jul 8, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2015-11484
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2015:1326
vendor-advisory
x_refsource_SUSE
1032799
vdb-entry
x_refsource_SECTRACK
USN-2669-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SU-2015:1205
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2015:1250
vendor-advisory
x_refsource_SUSE
RHSA-2015:1471
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1443
vendor-advisory
x_refsource_REDHAT
DSA-3304
vendor-advisory
x_refsource_DEBIAN
75588
vdb-entry
x_refsource_BID
GLSA-201510-01
vendor-advisory
x_refsource_GENTOO
HPSBUX03379
vendor-advisory
x_refsource_HP
SSRT101976
vendor-advisory
x_refsource_HP
FEDORA-2015-11483
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now