CVE-2015-1349

bind: issue in trust anchor management can cause named to crash

Severity Score

5.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

named en ISC BIND 9.7.0 hasta 9.9.6 anterior a 9.9.6-P2 y 9.10.x anterior a 9.10.1-P2, cuando la característica de la validación DNSSEC y de las claves gestionadas está habilitada, permite a atacantes remotos causar una denegación de servicio (fallo de aserción y salida del demonio, o caída del demonio) mediante la provocación de un escenario de gestión de identificadores de confianza (trust-anchor) incorrecto en que no haya clave lista para su uso.

A flaw was found in the way BIND handled trust anchor management. A remote attacker could use this flaw to cause the BIND daemon (named) to crash under certain conditions.

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-01-23 CVE Reserved
2015-02-18 CVE Published
2024-08-06 CVE Updated
2024-10-01 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-391: Unchecked Error Condition
CWE-399: Resource Management Errors

CAPEC

References (19)

URL	Tag	Source
http://advisories.mageia.org/MGASA-2015-0082.html	X_refsource_confirm
https://kb.juniper.net/JSA10783	X_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10116	X_refsource_confirm
https://support.apple.com/HT205219	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html	2018-10-30
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150904.html	2018-10-30
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150905.html	2018-10-30
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html	2018-10-30
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html	2018-10-30
http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html	2018-10-30
http://marc.info/?l=bugtraq&m=143740940810833&w=2	2018-10-30
http://rhn.redhat.com/errata/RHSA-2015-0672.html	2018-10-30
http://www.mandriva.com/security/advisories?name=MDVSA-2015:054	2018-10-30
http://www.mandriva.com/security/advisories?name=MDVSA-2015:165	2018-10-30
http://www.ubuntu.com/usn/USN-2503-1	2018-10-30
https://bugzilla.redhat.com/show_bug.cgi?id=1193820	2015-03-11
https://kb.isc.org/article/AA-01235	2018-10-30
https://security.gentoo.org/glsa/201510-01	2018-10-30
https://access.redhat.com/security/cve/CVE-2015-1349	2015-03-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2"		p3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.7.7 Search vendor "Isc" for product "Bind" and version "9.7.7"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		a1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		p4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		b3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.4 Search vendor "Isc" for product "Bind" and version "9.8.4"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		a1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		a2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		a3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.2 Search vendor "Isc" for product "Bind" and version "9.9.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.4 Search vendor "Isc" for product "Bind" and version "9.9.4"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.5 Search vendor "Isc" for product "Bind" and version "9.9.5"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.6 Search vendor "Isc" for product "Bind" and version "9.9.6"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.6 Search vendor "Isc" for product "Bind" and version "9.9.6"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.9.7 Search vendor "Isc" for product "Bind" and version "9.9.7"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.10.0 Search vendor "Isc" for product "Bind" and version "9.10.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.10.1 Search vendor "Isc" for product "Bind" and version "9.10.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.10.1 Search vendor "Isc" for product "Bind" and version "9.10.1"		p1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.10.2 Search vendor "Isc" for product "Bind" and version "9.10.2"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.10.2 Search vendor "Isc" for product "Bind" and version "9.10.2"		rc1		Affected