CVE-2015-8704
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
CVE-2015-8704- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
CVE-2015-8704- Updated
- 2026-11-02
EUVDEUVD-2015-8581 No score
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
EUVD-2015-8581- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9pc9-w372-6q8j
6.5
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
GHSA-9pc9-w372-6q8j- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
6.5
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
CVE-2015-8704- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-8704
6.5
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
DEBIAN-CVE-2015-8704- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2015-8704
6.5
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
- Record
UBUNTU-CVE-2015-8704- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0030 No score
Updated bind packages fix security vulnerability
In ISC BIND before 9.10.3-P3, a buffer size check used to guard against overflow could cause named to exit with an INSIST failure In apl_42.c (CVE-2015-8704).
In ISC BIND before 9.10.3-P3, errors can occur when OPT pseudo-RR data or ECS options are formatted to text. In 9.10.3 through 9.10.3-P2, the issue may result in a REQUIRE assertion failure in buffer.c, causing a crash. This can be avoided in named by disabling debug logging (CVE-2015-8705).
- Record
MGASA-2016-0030- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0174-1 No score
Security update for bind
This update for bind fixes the following issues:
- CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189)
- Record
SUSE-SU-2016:0174-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0180-1 No score
Security update for bind
This update for bind fixes the following issues:
- CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189)
- Record
SUSE-SU-2016:0180-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0200-1 No score
Security update for bind
This update for bind fixes the following issues:
- CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189)
- Record
SUSE-SU-2016:0200-1- Updated
- 2026-11-02
OSVUSN-2874-1 No score
bind9 vulnerability
It was discovered that Bind incorrectly handled certain APL data. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
- Record
USN-2874-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind9Debian:12 |
before 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
bind9Debian:13 |
before 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
bind9Debian:14 |
before 1:9.10.3.dfsg.P4-6 | 1:9.10.3.dfsg.P4-6 |
bind9Debian:6.0 |
before 1:9.7.3.dfsg-1~squeeze19, plus listed versions 1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze101:9.7.3.dfsg-1~squeeze111:9.7.3.dfsg-1~squeeze12 Show 17 moreShow less1:9.7.3.dfsg-1~squeeze131:9.7.3.dfsg-1~squeeze141:9.7.3.dfsg-1~squeeze151:9.7.3.dfsg-1~squeeze161:9.7.3.dfsg-1~squeeze171:9.7.3.dfsg-1~squeeze181:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+11:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+11:9.7.3.dfsg-1~squeeze41:9.7.3.dfsg-1~squeeze51:9.7.3.dfsg-1~squeeze61:9.7.3.dfsg-1~squeeze71:9.7.3.dfsg-1~squeeze81:9.7.3.dfsg-1~squeeze9 |
1:9.7.3.dfsg-1~squeeze19 |
bind9Debian:7 |
before 1:9.8.4.dfsg.P1-6+nmu2+deb7u9, plus listed versions 1:9.8.4.dfsg.P1-6+nmu21:9.8.4.dfsg.P1-6+nmu2+deb7u11:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u21:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+1 Show 6 moreShow less1:9.8.4.dfsg.P1-6+nmu2+deb7u31:9.8.4.dfsg.P1-6+nmu2+deb7u41:9.8.4.dfsg.P1-6+nmu2+deb7u51:9.8.4.dfsg.P1-6+nmu2+deb7u61:9.8.4.dfsg.P1-6+nmu2+deb7u71:9.8.4.dfsg.P1-6+nmu2+deb7u8 |
1:9.8.4.dfsg.P1-6+nmu2+deb7u9 |
bind9Debian:8 |
before 1:9.9.5.dfsg-9+deb8u5, plus listed versions 1:9.9.5.dfsg-91:9.9.5.dfsg-9+deb8u11:9.9.5.dfsg-9+deb8u21:9.9.5.dfsg-9+deb8u31:9.9.5.dfsg-9+deb8u4 |
1:9.9.5.dfsg-9+deb8u5 |
bindMageia:5 From an advisory covering 2 CVEs |
before 9.10.3.P3-1.mga5 | 9.10.3.P3-1.mga5 |
bindRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-debuginfoRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-libsRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
Show 137 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bind-sdbRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-utilsRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bindRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-chrootRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-develRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-libbind-develRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
caching-nameserverRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bindRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-chrootRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-debuginfoRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-develRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-libbind-develRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-libsRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-sdbRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bind-utilsRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
caching-nameserverRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.6 | 30:9.3.6-25.P1.el5_11.6 |
bindRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-debuginfoRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-libsRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-utilsRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-chrootRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-develRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-sdbRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bindRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-debuginfoRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-libsRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-utilsRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-chrootRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-develRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-sdbRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bindRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-chrootRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-debuginfoRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-libsRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-utilsRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-develRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-sdbRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bindRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-chrootRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-debuginfoRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-libsRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-utilsRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-develRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bind-sdbRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.6 | 32:9.8.2-0.37.rc1.el6_7.6 |
bindRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-debuginfoRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libs-liteRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-licenseRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-utilsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-chrootRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-develRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-lite-develRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11Red Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-develRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-libsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-utilsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdbRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdb-chrootRed Hat:enterprise_linux:7::client |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bindRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-debuginfoRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libs-liteRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-licenseRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-utilsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-chrootRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-develRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-lite-develRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11Red Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-develRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-libsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-utilsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdbRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdb-chrootRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bindRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-chrootRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-debuginfoRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libs-liteRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-licenseRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11Red Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-libsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-utilsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-utilsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-develRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-lite-develRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-develRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdbRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdb-chrootRed Hat:enterprise_linux:7::server |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bindRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-chrootRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-debuginfoRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-libs-liteRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-licenseRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11Red Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-libsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-utilsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-utilsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-develRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-lite-develRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-pkcs11-develRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdbRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind-sdb-chrootRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-29.el7_2.2 | 32:9.9.4-29.el7_2.2 |
bind97Red Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-chrootRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-develRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-libsRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-utilsRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97Red Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-chrootRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-debuginfoRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-develRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-libsRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bind97-utilsRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.5 | 32:9.7.0-21.P2.el5_11.5 |
bindSUSE:Linux Enterprise Desktop 12 SP1 |
before 9.9.6P1-35.1 | 9.9.6P1-35.1 |
bindSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 9.9.6P1-35.1 | 9.9.6P1-35.1 |
bindSUSE:Linux Enterprise Server 12 SP1 |
before 9.9.6P1-35.1 | 9.9.6P1-35.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 9.9.6P1-35.1 | 9.9.6P1-35.1 |
bindSUSE:Linux Enterprise Desktop 12 |
before 9.9.6P1-28.9.1 | 9.9.6P1-28.9.1 |
bindSUSE:Linux Enterprise Software Development Kit 12 |
before 9.9.6P1-28.9.1 | 9.9.6P1-28.9.1 |
bindSUSE:Linux Enterprise Server 12 |
before 9.9.6P1-28.9.1 | 9.9.6P1-28.9.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 12 |
before 9.9.6P1-28.9.1 | 9.9.6P1-28.9.1 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Desktop 11 SP3 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Desktop 11 SP4 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server 11 SP2-LTSS |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server 11 SP3 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server 11 SP4 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 9.9.6P1-0.22.1 | 9.9.6P1-0.22.1 |
bind9Ubuntu:14.04:LTS |
before 1:9.9.5.dfsg-3ubuntu0.7, plus listed versions 1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3 Show 6 moreShow less1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.6 |
1:9.9.5.dfsg-3ubuntu0.7 |
bindopenSUSE:Tumbleweed From an advisory covering 37 CVEs |
before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8704 is a medium vulnerability (CVSS 6.5) in Isc Bind, published January 19, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.7%, the 97th percentile. Fixed in bind9 1:9.10.3.dfsg.P4-6.
References
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
marc.info?l=bugtraq&m=145680832702035&w=2
ubuntu.com/usn/USN-2874-1
rhn.redhat.com/errata/RHSA-2016-0073.html
kb.isc.org/article/AA-01335
freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc
Show 79 moreShow less
lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html
kb.isc.org/article/AA-01438
debian.org/security/2016/dsa-3449
lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html
rhn.redhat.com/errata/RHSA-2016-0074.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html
oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html
security.gentoo.org/glsa/201610-07
securitytracker.com/id/1034739
kb.isc.org/article/AA-01380
lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html
oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html
oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
securityfocus.com/bid/81329
lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html
nvd.nist.gov/vuln/detail/CVE-2015-8704
github.com/advisories/GHSA-9pc9-w372-6q8j
security-tracker.debian.org/tracker/CVE-2015-8704
advisories.mageia.org/MGASA-2016-0030.html
bugs.mageia.org/show_bug.cgi?id=17541
kb.isc.org/article/AA-01336
kb.isc.org/article/AA-01346
access.redhat.com/errata/RHSA-2016:0073
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1299364
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0073.json
access.redhat.com/security/cve/CVE-2015-8704
cve.org/CVERecord?id=CVE-2015-8704
access.redhat.com/errata/RHSA-2016:0074
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0074.json
suse.com/support/update/announcement/2016/suse-su-20160174-1
bugzilla.suse.com/962189
suse.com/security/cve/CVE-2015-8704
suse.com/support/update/announcement/2016/suse-su-20160180-1
suse.com/support/update/announcement/2016/suse-su-20160200-1
ubuntu.com/security/CVE-2015-8704
ubuntu.com/security/notices/USN-2874-1
suse.com/security/cve/CVE-2009-0696
suse.com/security/cve/CVE-2009-4022
suse.com/security/cve/CVE-2010-3613
suse.com/security/cve/CVE-2010-3614
suse.com/security/cve/CVE-2010-3615
suse.com/security/cve/CVE-2011-0414
suse.com/security/cve/CVE-2011-1907
suse.com/security/cve/CVE-2011-1910
suse.com/security/cve/CVE-2011-2464
suse.com/security/cve/CVE-2011-4313
suse.com/security/cve/CVE-2012-1667
suse.com/security/cve/CVE-2012-3817
suse.com/security/cve/CVE-2012-3868
suse.com/security/cve/CVE-2012-4244
suse.com/security/cve/CVE-2012-5166
suse.com/security/cve/CVE-2012-5688
suse.com/security/cve/CVE-2012-5689
suse.com/security/cve/CVE-2013-2266
suse.com/security/cve/CVE-2013-4854
suse.com/security/cve/CVE-2014-0591
suse.com/security/cve/CVE-2014-3214
suse.com/security/cve/CVE-2014-3859
suse.com/security/cve/CVE-2014-8500
suse.com/security/cve/CVE-2014-8680
suse.com/security/cve/CVE-2015-1349
suse.com/security/cve/CVE-2015-4620
suse.com/security/cve/CVE-2015-5477
suse.com/security/cve/CVE-2015-5722
suse.com/security/cve/CVE-2015-5986
suse.com/security/cve/CVE-2015-8000
suse.com/security/cve/CVE-2015-8705
suse.com/security/cve/CVE-2016-1285
suse.com/security/cve/CVE-2016-1286
suse.com/security/cve/CVE-2016-2088
suse.com/security/cve/CVE-2016-2776
suse.com/security/cve/CVE-2016-8864