{"id":"CVE-2015-5986","aliases":["EUVD-2015-5929","GHSA-q676-ggwg-j7vx","MGASA-2015-0341","openSUSE-SU-2024:10467-1"],"status":"published","title":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows...","description":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.","severity":{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.26925,"percentile":0.98052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2015-09-05T01:00:00Z","modified":"2026-06-17T00:30:12Z","affected":[{"source":"osv","ecosystem":"Mageia:4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.7.P3-1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.2.P4-1.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.3P4-21.1"}]}],"bundled":37}],"products":[{"vendor":"apple","product":"mac_os_x_server"},{"vendor":"isc","product":"bind"}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01438","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://support.apple.com/HT205376","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10134","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01291","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"https://kb.isc.org/article/AA-01307","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201510-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securitytracker.com/id/1033453","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/76618","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01305","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01306","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190730-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5986"},{"url":"https://security.netapp.com/advisory/ntap-20190730-0001"},{"url":"https://github.com/advisories/GHSA-q676-ggwg-j7vx"},{"url":"https://advisories.mageia.org/MGASA-2015-0341.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16695","tags":["report"]},{"url":"https://kb.isc.org/article/AA-01287","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01300","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01301","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8864","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-5986","description":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.","status":"published","published":"2015-09-05T01:00:00Z","modified":"2024-08-06T07:06:35.031Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5929","description":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.","status":"published","published":"2015-09-05T01:00:00Z","modified":"2024-08-06T07:06:35Z","updated_at":"2026-11-03T02:21:57.614992Z"}],"ghsa":[{"id":"GHSA-q676-ggwg-j7vx","title":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows...","description":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.","status":"published","published":"2022-05-17T03:11:47Z","modified":"2025-04-12T12:52:44Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:23.793952Z"}],"nvd":[{"id":"CVE-2015-5986","description":"openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.","status":"published","published":"2015-09-05T02:59:04.367Z","modified":"2026-06-17T00:30:12.747Z","cvss":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:09.92183Z"}],"osv":[{"id":"MGASA-2015-0341","title":"Updated bind packages fix security vulnerabilities","description":"Updated bind packages fix security vulnerability:\n\nParsing a malformed DNSSEC key can cause a validating resolver to exit due to\na failed assertion in buffer.c.  It is possible for a remote attacker to\ndeliberately trigger this condition, for example by using a query which\nrequires a response from a zone containing a deliberately malformed key\n(CVE-2015-5722).\n\nAn incorrect boundary check in openpgpkey_61.c can cause named to terminate\ndue to a REQUIRE assertion failure.  This defect can be deliberately exploited\nby an attacker who can provide a maliciously constructed response in answer to\na query (CVE-2015-5986).\n","status":"published","published":"2015-09-08T07:20:40Z","modified":"2026-04-16T06:25:02.430070531Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10467-1","title":"bind-9.10.3P4-21.1 on GA media","description":"These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:15.60024Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}