CVE-2015-5722
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...
7.8 HighFix available
CVE-2015-5722 is a high vulnerability (CVSS 7.8) in Isc Bind, published September 2, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 34.9%, the 98th percentile. Fixed in bind9 1:9.9.5.dfsg-12.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 34.9%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:9.9.5.dfsg-12bind9 +157 more
Description
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Exploit likelihood
34.9%Up 8.5 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind9Debian:12 | before 1:9.9.5.dfsg-12 | 1:9.9.5.dfsg-12 |
bind9Debian:13 | before 1:9.9.5.dfsg-12 | 1:9.9.5.dfsg-12 |
bind9Debian:14 | before 1:9.9.5.dfsg-12 | 1:9.9.5.dfsg-12 |
bind9Debian:6.0 | before 1:9.7.3.dfsg-1~squeeze17, plus listed versions 1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze101:9.7.3.dfsg-1~squeeze111:9.7.3.dfsg-1~squeeze12 Show 15 moreShow less1:9.7.3.dfsg-1~squeeze131:9.7.3.dfsg-1~squeeze141:9.7.3.dfsg-1~squeeze151:9.7.3.dfsg-1~squeeze161:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+11:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+11:9.7.3.dfsg-1~squeeze41:9.7.3.dfsg-1~squeeze51:9.7.3.dfsg-1~squeeze61:9.7.3.dfsg-1~squeeze71:9.7.3.dfsg-1~squeeze81:9.7.3.dfsg-1~squeeze9 | 1:9.7.3.dfsg-1~squeeze17 |
bind9Debian:7 | before 1:9.8.4.dfsg.P1-6+nmu2+deb7u7, plus listed versions 1:9.8.4.dfsg.P1-6+nmu21:9.8.4.dfsg.P1-6+nmu2+deb7u11:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u21:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+1 Show 4 moreShow less1:9.8.4.dfsg.P1-6+nmu2+deb7u31:9.8.4.dfsg.P1-6+nmu2+deb7u41:9.8.4.dfsg.P1-6+nmu2+deb7u51:9.8.4.dfsg.P1-6+nmu2+deb7u6 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u7 |
bind9Debian:8 | before 1:9.9.5.dfsg-9+deb8u3, plus listed versions 1:9.9.5.dfsg-91:9.9.5.dfsg-9+deb8u11:9.9.5.dfsg-9+deb8u2 | 1:9.9.5.dfsg-9+deb8u3 |
bindMageia:4 From an advisory covering 2 CVEs | before 9.9.7.P3-1.mga4 | 9.9.7.P3-1.mga4 |
bindMageia:5 From an advisory covering 2 CVEs | before 9.10.2.P4-1.mga5 | 9.10.2.P4-1.mga5 |
bindRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-debuginfoRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
Show 148 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bind-libsRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-utilsRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-chrootRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-develRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-sdbRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bindRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-debuginfoRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-libsRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-utilsRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-chrootRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-develRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-sdbRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bindRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-chrootRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-debuginfoRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-libsRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-utilsRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-develRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-sdbRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bindRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-chrootRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-debuginfoRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-libsRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-utilsRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-develRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bind-sdbRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.37.rc1.el6_7.4 | 32:9.8.2-0.37.rc1.el6_7.4 |
bindRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-debuginfoRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libsRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libs-liteRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-licenseRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-utilsRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-chrootRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-develRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-lite-develRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdbRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdb-chrootRed Hat:enterprise_linux:7::client | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bindRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-debuginfoRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libsRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libs-liteRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-licenseRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-utilsRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-chrootRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-develRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-lite-develRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdbRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdb-chrootRed Hat:enterprise_linux:7::computenode | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bindRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-chrootRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-debuginfoRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-libsRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-libs-liteRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-licenseRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-utilsRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-develRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-lite-develRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-sdbRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bind-sdb-chrootRed Hat:enterprise_linux:7::server | before 32:9.9.4-18.ael7b_1.5 | 32:9.9.4-18.ael7b_1.5 |
bindRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-chrootRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-debuginfoRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libsRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-libs-liteRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-licenseRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-utilsRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-develRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-lite-develRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdbRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bind-sdb-chrootRed Hat:enterprise_linux:7::workstation | before 32:9.9.4-18.el7_1.5 | 32:9.9.4-18.el7_1.5 |
bindRed Hat:enterprise_linux:5::client | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-debuginfoRed Hat:enterprise_linux:5::client | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-libsRed Hat:enterprise_linux:5::client | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-sdbRed Hat:enterprise_linux:5::client | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-utilsRed Hat:enterprise_linux:5::client | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bindRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-chrootRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-debuginfoRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-develRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-libbind-develRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
caching-nameserverRed Hat:enterprise_linux:5::client_workstation | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bindRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-chrootRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-debuginfoRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-develRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-libbind-develRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-libsRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-sdbRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind-utilsRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
caching-nameserverRed Hat:enterprise_linux:5::server | before 30:9.3.6-25.P1.el5_11.4 | 30:9.3.6-25.P1.el5_11.4 |
bind97Red Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-chrootRed Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-debuginfoRed Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-develRed Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-libsRed Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-utilsRed Hat:enterprise_linux:5::client_workstation | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97Red Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-chrootRed Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-debuginfoRed Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-develRed Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-libsRed Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bind97-utilsRed Hat:enterprise_linux:5::server | before 32:9.7.0-21.P2.el5_11.3 | 32:9.7.0-21.P2.el5_11.3 |
bindRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-chrootRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-debuginfoRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-libsRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-utilsRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bindRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-chrootRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-debuginfoRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-libsRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-utilsRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-develRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-sdbRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs | before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-develRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-sdbRed Hat:rhel_aus:6.5::server From an advisory covering 4 CVEs | before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bindRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-debuginfoRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-libsRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-utilsRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-chrootRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-develRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-sdbRed Hat:rhel_eus:6.6::computenode From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bindRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-chrootRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-debuginfoRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-libsRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-utilsRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-develRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-sdbRed Hat:rhel_eus:6.6::server From an advisory covering 3 CVEs | before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP3 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP4 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Desktop 11 SP3 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Desktop 11 SP4 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server 11 SP2-LTSS | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server 11 SP3 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server 11 SP3-TERADATA | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP3 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server 11 SP4 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP4 | before 9.9.6P1-0.15.1 | 9.9.6P1-0.15.1 |
bindSUSE:Linux Enterprise Desktop 12 | before 9.9.6P1-26.1 | 9.9.6P1-26.1 |
bindSUSE:Linux Enterprise Software Development Kit 12 | before 9.9.6P1-26.1 | 9.9.6P1-26.1 |
bindSUSE:Linux Enterprise Server 12 | before 9.9.6P1-26.1 | 9.9.6P1-26.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 12 | before 9.9.6P1-26.1 | 9.9.6P1-26.1 |
bindSUSE:Linux Enterprise Server 11 SP1-LTSS | before 9.6ESVR11W1-0.9.1 | 9.6ESVR11W1-0.9.1 |
bindSUSE:Linux Enterprise Server 11 SP1-TERADATA | before 9.6ESVR11W1-0.9.1 | 9.6ESVR11W1-0.9.1 |
bind9Ubuntu:14.04:LTS | before 1:9.9.5.dfsg-3ubuntu0.5, plus listed versions 1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3 Show 4 moreShow less1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.4 | 1:9.9.5.dfsg-3ubuntu0.5 |
bindopenSUSE:Tumbleweed From an advisory covering 37 CVEs | before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
What each source reports
NVD Score used
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
CVE-2015-5722- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
CVE-2015-5722- Updated
- 2026-11-02
EUVDEUVD-2015-5669No score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
EUVD-2015-5669- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q4fr-6j5h-39h7No score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
GHSA-q4fr-6j5h-39h7- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
CVE-2015-5722- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-5722No score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
DEBIAN-CVE-2015-5722- Updated
- 2026-11-02
Show 7 moreShow less
OSVMGASA-2015-0341No score
Updated bind packages fix security vulnerabilities
Updated bind packages fix security vulnerability:
Parsing a malformed DNSSEC key can cause a validating resolver to exit due to a failed assertion in buffer.c. It is possible for a remote attacker to deliberately trigger this condition, for example by using a query which requires a response from a zone containing a deliberately malformed key (CVE-2015-5722).
An incorrect boundary check in openpgpkey_61.c can cause named to terminate due to a REQUIRE assertion failure. This defect can be deliberately exploited by an attacker who can provide a maliciously constructed response in answer to a query (CVE-2015-5986).
- Record
MGASA-2015-0341- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1480-1No score
Security update for bind
The nameserver bind was updated to fix a remote denial of service (crash) attack against bind nameservers doing validation on DNSSEC signed records. (CVE-2015-5722, bsc#944066).
- Record
SUSE-SU-2015:1480-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1481-1No score
Security update for bind
The nameserver bind was updated to fix a remote denial of service (crash) attack against bind nameservers doing validation on DNSSEC signed records. (CVE-2015-5722, bsc#944066).
- Record
SUSE-SU-2015:1481-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1496-1No score
Security update for bind
The nameserver bind was updated to fix a remote denial of service (crash) attack against bind nameservers doing validation on DNSSEC signed records. (CVE-2015-5722, bsc#944066).
- Record
SUSE-SU-2015:1496-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5722No score
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
- Record
UBUNTU-CVE-2015-5722- Updated
- 2026-11-02
OSVUSN-2728-1No score
bind9 vulnerability
Hanno Böck discovered that Bind incorrectly handled certain malformed keys when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service.
- Record
USN-2728-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
ubuntu.com/usn/USN-2728-1
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html
lists.fedoraproject.org/pipermail/package-announce/2015-September/165996.html
rhn.redhat.com/errata/RHSA-2015-1706.html
lists.apple.com/archives/security-announce/2015/Oct/msg00009.html
Show 116 moreShow less
kb.isc.org/article/AA-01438
marc.info?l=bugtraq&m=144294073801304&w=2
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
support.apple.com/HT205376
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04891218
kc.mcafee.com/corporate/index?page=content&id=SB10134
securitytracker.com/id/1033452
security.gentoo.org/glsa/201510-01
securityfocus.com/bid/76605
debian.org/security/2015/dsa-3350
security.netapp.com/advisory/ntap-20190730-0001
nvd.nist.gov/vuln/detail/CVE-2015-5722
github.com/advisories/GHSA-q4fr-6j5h-39h7
security-tracker.debian.org/tracker/CVE-2015-5722
advisories.mageia.org/MGASA-2015-0341.html
bugs.mageia.org/show_bug.cgi?id=16695
access.redhat.com/errata/RHSA-2015:1705
bugzilla.redhat.com/show_bug.cgi?id=1259087
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1705.json
cve.org/CVERecord?id=CVE-2015-5722
cisa.gov/known-exploited-vulnerabilities-catalog
suse.com/support/update/announcement/2015/suse-su-20151480-1
bugzilla.suse.com/944066
ubuntu.com/security/CVE-2015-5722
isc.org/blogs/cve-2015-5722-parsing-malformed-keys-may-cause-bind-to-exit-due-to-a-failed-assertion-in-buffer-c