CVE-2015-8000
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
- EPSS
- 56% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- isc:bind
- oracle:linux
- oracle:solaris
- oracle:vm_server
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174143.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174520.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.html