CVE-2015-8461

high

Description

Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.

References

https://kb.isc.org/article/AA-01438

https://kb.isc.org/article/AA-01380

https://kb.isc.org/article/AA-01319

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966

http://www.securitytracker.com/id/1034419

http://www.securityfocus.com/bid/79347

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html

Details

Source: Mitre, NVD

Published: 2015-12-16

Updated: 2018-10-30

Risk Information

CVSS v2

Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H