CVE-2015-4620
bind: abort DoS caused by uninitialized value use in isselfsigned()
Severity Score
10.0
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
name.c en named en ISC BIND 9.7.x hasta 9.9.x anterior a 9.9.7-P1 y 9.10.x anterior a 9.10.2-P2, cuando configurado como solucionador recursivo con validación DNSSEC, permite a atacantes remotos causar una denegación de servicio (fallo de aserción REQUIRE y salida de demonio) mediante la construcción de datos de zona manipulados y posteriormente la realización de una consulta de un nombre en esta zona.
A flaw was found in the way BIND performed DNSSEC validation. An attacker able to make BIND (functioning as a DNS resolver with DNSSEC validation enabled) resolve a name in an attacker-controlled domain could cause named to exit unexpectedly with an assertion failure.
BIND 9 is an implementation of the Domain Name System (DNS) protocol. The named daemon is an Internet Domain Name Server. The libdns library is a library of DNS protocol support functions. Due to a software defect, specially constructed zone data could cause named to crash with an assertion failure and rejecting the malformed query when DNSSEC validation is enabled. An attacker who can cause specific queries to be sent to a nameserver could cause named to crash, resulting in a denial of service.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-16 CVE Reserved
- 2015-07-08 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-17: DEPRECATED: Code
- CWE-617: Reachable Assertion
CAPEC
References (23)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/75588 | Vdb Entry | |
| http://www.securitytracker.com/id/1032799 | Vdb Entry | |
| https://kb.isc.org/article/AA-01305 | X_refsource_confirm | |
| https://kb.isc.org/article/AA-01306 | X_refsource_confirm | |
| https://kb.isc.org/article/AA-01307 | X_refsource_confirm | |
| https://kb.isc.org/article/AA-01438 | X_refsource_confirm | |
| https://kb.juniper.net/JSA10783 | X_refsource_confirm | |
| https://kc.mcafee.com/corporate/index?page=content&id=SB10124 | X_refsource_confirm | |
| https://security.netapp.com/advisory/ntap-20190903-0003 | X_refsource_confirm |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.7 Search vendor "Isc" for product "Bind" and version "9.7.7" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | a1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p4 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.4 Search vendor "Isc" for product "Bind" and version "9.8.4" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.6 Search vendor "Isc" for product "Bind" and version "9.8.6" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc4 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.2 Search vendor "Isc" for product "Bind" and version "9.9.2" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.4 Search vendor "Isc" for product "Bind" and version "9.9.4" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.5 Search vendor "Isc" for product "Bind" and version "9.9.5" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.6 Search vendor "Isc" for product "Bind" and version "9.9.6" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.6 Search vendor "Isc" for product "Bind" and version "9.9.6" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.7 Search vendor "Isc" for product "Bind" and version "9.9.7" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.7 Search vendor "Isc" for product "Bind" and version "9.9.7" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.7 Search vendor "Isc" for product "Bind" and version "9.9.7" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.0 Search vendor "Isc" for product "Bind" and version "9.10.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.1 Search vendor "Isc" for product "Bind" and version "9.10.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.1 Search vendor "Isc" for product "Bind" and version "9.10.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.2 Search vendor "Isc" for product "Bind" and version "9.10.2" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.2 Search vendor "Isc" for product "Bind" and version "9.10.2" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.10.2 Search vendor "Isc" for product "Bind" and version "9.10.2" | rc1 |
Affected
| ||||||