CVE-2015-8000

Published: Dec 16, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.

Affected (170)

Products: Oracle: Linux, Solaris, Vm Server · Isc: Bind

3 products

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5.0
Oracle Linux	Version 6
Oracle Linux	Version 7
Oracle Solaris	Version 10
Oracle Solaris	Version 11.3
Oracle Vm Server	Version 3.2

Configuration B

164 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 8.4.7
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.3
Isc Bind	Version 9.10.0
Isc Bind	Version 9.10.1
Isc Bind	Version 9.10.1 p1
Isc Bind	Version 9.10.2 b1
Isc Bind	Version 9.10.2 p1
Isc Bind	Version 9.10.2 p2
Isc Bind	Version 9.10.2 p3
Isc Bind	Version 9.10.2 p4
Isc Bind	Version 9.10.2 rc1
Isc Bind	Version 9.10.3
Isc Bind	Version 9.10.3 rc1
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.3
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4.3 rc1
Isc Bind	Version 9.4
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.0 rc1
Isc Bind	Version 9.5.1
Isc Bind	Version 9.5.1 rc1
Isc Bind	Version 9.5.1 rc2
Isc Bind	Version 9.5.2
Isc Bind	Version 9.5.2 rc1
Isc Bind	Version 9.5.3
Isc Bind	Version 9.5.3 rc1
Isc Bind	Version 9.5
Isc Bind	Version 9.6.0
Isc Bind	Version 9.6.0 p1
Isc Bind	Version 9.6.0 rc1
Isc Bind	Version 9.6.0 rc2
Isc Bind	Version 9.6.1
Isc Bind	Version 9.6.1 p1
Isc Bind	Version 9.6.1 p2
Isc Bind	Version 9.6.1 p3
Isc Bind	Version 9.6.1 rc1
Isc Bind	Version 9.6.2
Isc Bind	Version 9.6.2 rc1
Isc Bind	Version 9.6.3
Isc Bind	Version 9.6.3 rc1
Isc Bind	Version 9.6
Isc Bind	Version 9.6 r5_p1
Isc Bind	Version 9.6 r6_b1
Isc Bind	Version 9.6 r6_rc1
Isc Bind	Version 9.6 r6_rc2
Isc Bind	Version 9.6 r7_p1
Isc Bind	Version 9.6 r7_p2
Isc Bind	Version 9.6 r9_p1
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.0 b1
Isc Bind	Version 9.7.0 p1
Isc Bind	Version 9.7.0 p2
Isc Bind	Version 9.7.0 rc1
Isc Bind	Version 9.7.0 rc2
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.1 p1
Isc Bind	Version 9.7.1 p2
Isc Bind	Version 9.7.1 rc1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.2 p1
Isc Bind	Version 9.7.2 p2
Isc Bind	Version 9.7.2 p3
Isc Bind	Version 9.7.2 rc1
Isc Bind	Version 9.7.3
Isc Bind	Version 9.7.3 b1
Isc Bind	Version 9.7.3 p1
Isc Bind	Version 9.7.3 rc1
Isc Bind	Version 9.7.4
Isc Bind	Version 9.7.4 b1
Isc Bind	Version 9.7.4 p1
Isc Bind	Version 9.7.4 rc1
Isc Bind	Version 9.7.5
Isc Bind	Version 9.7.5 b1
Isc Bind	Version 9.7.5 rc1
Isc Bind	Version 9.7.5 rc2
Isc Bind	Version 9.7.6
Isc Bind	Version 9.7.6 p1
Isc Bind	Version 9.7.6 p2
Isc Bind	Version 9.7.7
Isc Bind	Version 9.8.0
Isc Bind	Version 9.8.0 a1
Isc Bind	Version 9.8.0 b1
Isc Bind	Version 9.8.0 p1
Isc Bind	Version 9.8.0 p2
Isc Bind	Version 9.8.0 p4
Isc Bind	Version 9.8.0 rc1
Isc Bind	Version 9.8.1
Isc Bind	Version 9.8.1 b1
Isc Bind	Version 9.8.1 b2
Isc Bind	Version 9.8.1 b3
Isc Bind	Version 9.8.1 p1
Isc Bind	Version 9.8.1 rc1
Isc Bind	Version 9.8.2 b1
Isc Bind	Version 9.8.2 rc1
Isc Bind	Version 9.8.2 rc2
Isc Bind	Version 9.8.3
Isc Bind	Version 9.8.3 p1
Isc Bind	Version 9.8.3 p2
Isc Bind	Version 9.8.4
Isc Bind	Version 9.8.5
Isc Bind	Version 9.8.5 b1
Isc Bind	Version 9.8.5 b2
Isc Bind	Version 9.8.5 p1
Isc Bind	Version 9.8.5 p2
Isc Bind	Version 9.8.5 rc1
Isc Bind	Version 9.8.5 rc2
Isc Bind	Version 9.8.6 b1
Isc Bind	Version 9.8.6 rc1
Isc Bind	Version 9.8.6 rc2
Isc Bind	Version 9.9.0
Isc Bind	Version 9.9.0 a1
Isc Bind	Version 9.9.0 a2
Isc Bind	Version 9.9.0 a3
Isc Bind	Version 9.9.0 b1
Isc Bind	Version 9.9.0 b2
Isc Bind	Version 9.9.0 rc1
Isc Bind	Version 9.9.0 rc2
Isc Bind	Version 9.9.0 rc3
Isc Bind	Version 9.9.0 rc4
Isc Bind	Version 9.9.1
Isc Bind	Version 9.9.1 p1
Isc Bind	Version 9.9.1 p2
Isc Bind	Version 9.9.2
Isc Bind	Version 9.9.3
Isc Bind	Version 9.9.3 b1
Isc Bind	Version 9.9.3 b2
Isc Bind	Version 9.9.3 p1
Isc Bind	Version 9.9.3 p2
Isc Bind	Version 9.9.3 rc1
Isc Bind	Version 9.9.3 rc2
Isc Bind	Version 9.9.4 b1
Isc Bind	Version 9.9.5
Isc Bind	Version 9.9.6
Isc Bind	Version 9.9.6 p1
Isc Bind	Version 9.9.7 b1
Isc Bind	Version 9.9.7 p1
Isc Bind	Version 9.9.7 rc1
Isc Bind	Version 9.9.7 rc2
Isc Bind	Version 9.9.8
Isc Bind	Version 9.9.8 rc1
Isc Bind	Version 9.9.8 s1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (64)

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174143.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174520.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00028.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00034.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00035.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00036.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00042.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=145680832702035&w=2

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/134882/FreeBSD-Security-Advisory-BIND-Denial-Of-Service.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-2655.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-2656.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-2658.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0078.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0079.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3420

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/79349

Source: cve@mitre.org

http://www.securitytracker.com/id/1034418

Source: cve@mitre.org

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2837-1

Source: cve@mitre.org

https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/

Source: cve@mitre.org

Patch

https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/

Source: cve@mitre.org

Patch

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923105

Source: cve@mitre.org

https://kb.isc.org/article/AA-01317

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01380

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174143.html