CVE-2015-4620

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation…

published July 8, 2015

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38762 · 98.6th percentile
Published
2015-07-08T14:00Z
EPSS history
Timeline
  • 08 JUL 14:00Z
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation…
    cvelistv5