CVE-2015-8704

Published: Jan 20, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.

Affected (59)

Products: Isc: Bind

1 product

Configuration A

59 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.3
Isc Bind	Version 9.10.1
Isc Bind	Version 9.10.1 p1
Isc Bind	Version 9.10.2
Isc Bind	Version 9.10.2 b1
Isc Bind	Version 9.10.2 p1
Isc Bind	Version 9.10.2 p2
Isc Bind	Version 9.10.2 p3
Isc Bind	Version 9.10.2 p4
Isc Bind	Version 9.10.2 rc1
Isc Bind	Version 9.10.3
Isc Bind	Version 9.10.3 p1
Isc Bind	Version 9.10.3 p2
Isc Bind	Version 9.10.3 rc1
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.3
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4.3 rc1
Isc Bind	Version 9.4
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.0 rc1
Isc Bind	Version 9.5.1
Isc Bind	Version 9.5.1 rc1
Isc Bind	Version 9.5.1 rc2
Isc Bind	Version 9.5.2
Isc Bind	Version 9.5.2 rc1
Isc Bind	Version 9.5.3
Isc Bind	Version 9.5.3 rc1
Isc Bind	Version 9.5
Isc Bind	Version 9.6
Isc Bind	Version 9.6 r5_p1
Isc Bind	Version 9.6 r6_b1
Isc Bind	Version 9.6 r6_rc1
Isc Bind	Version 9.6 r6_rc2
Isc Bind	Version 9.6 r7_p1
Isc Bind	Version 9.6 r7_p2
Isc Bind	Version 9.9.8 p2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (54)

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=145680832702035&w=2

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0073.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0074.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3449

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/81329

Source: cve@mitre.org

http://www.securitytracker.com/id/1034739

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2874-1

Source: cve@mitre.org

https://kb.isc.org/article/AA-01335

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01380

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

https://security.gentoo.org/glsa/201610-07

Source: cve@mitre.org

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=145680832702035&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0073.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0074.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3449

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/81329

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1034739

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2874-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.isc.org/article/AA-01335

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://kb.isc.org/article/AA-01380

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://kb.isc.org/article/AA-01438

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201610-07

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.