CVE-2015-1349

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

Affected products

Alt Linux, Bind Server, Centos, Hp-Ux, Isc Bind, Red Hat, Suse, Ubuntu

Isc Bind

= 9.7.0, 9.7.1, 9.7.2, 9.7.3, 9.7.4, 9.7.5, 9.7.6, 9.7.7, 9.8.0, 9.8.1, 9.8.2, 9.8.3, 9.8.4, 9.8.5, 9.8.6, 9.9.0, 9.9.1, 9.9.2, 9.9.3, 9.9.4, 9.9.5, 9.9.6, 9.9.7, 9.10.0, 9.10.1, 9.10.2

Fix

Available

CVSS 2.0

5.4 MEDIUM

EPSS

22.2% (97th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2015-02-19

No exploit for CVE-2015-1349 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.