CVE-2015-5722

Published: Sep 5, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.

Affected (3)

Products: Isc: Bind · Apple: Mac Os X Server

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Up to 9.9.7
Isc Bind	Up to 9.10.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X Server	Version 5.0.15

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (74)

http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168686.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165750.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165996.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00005.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00012.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00020.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=144294073801304&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-1705.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-1706.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-1707.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0078.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0079.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3350

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/76605

Source: cve@mitre.org

http://www.securitytracker.com/id/1033452

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2728-1

Source: cve@mitre.org

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04891218

Source: cve@mitre.org

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923105

Source: cve@mitre.org

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480

Source: cve@mitre.org

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918

Source: cve@mitre.org

https://kb.isc.org/article/AA-01287

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01305

Source: cve@mitre.org

https://kb.isc.org/article/AA-01306

Source: cve@mitre.org

https://kb.isc.org/article/AA-01307

Source: cve@mitre.org

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

https://kc.mcafee.com/corporate/index?page=content&id=SB10134

Source: cve@mitre.org

https://security.gentoo.org/glsa/201510-01

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20190730-0001/

Source: cve@mitre.org

https://support.apple.com/HT205376

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html