{"id":"CVE-2015-8461","aliases":["EUVD-2015-8343","GHSA-h967-r8fq-h9x2","openSUSE-SU-2024:10650-1"],"status":"published","title":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3...","description":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.","severity":{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05046,"percentile":0.92352,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2015-12-16T15:00:00Z","modified":"2026-06-17T00:34:36Z","affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.20-1.4"}]}],"bundled":32}],"products":[{"vendor":"isc","product":"bind"}],"references":[{"url":"http://www.securitytracker.com/id/1034419","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01438","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/79347","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01380","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.539966","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"https://kb.isc.org/article/AA-01319","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8461"},{"url":"https://github.com/advisories/GHSA-h967-r8fq-h9x2"},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25218","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-8461","description":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.","status":"published","published":"2015-12-16T15:00:00Z","modified":"2024-08-06T08:20:41.759Z","updated_at":"2026-11-02T14:35:41.26549Z"}],"euvd":[{"id":"EUVD-2015-8343","description":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.","status":"published","published":"2015-12-16T15:00:00Z","modified":"2024-08-06T08:20:41Z","updated_at":"2026-11-03T01:57:27.324974Z"}],"ghsa":[{"id":"GHSA-h967-r8fq-h9x2","title":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3...","description":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.","status":"published","published":"2022-05-14T02:13:41Z","modified":"2023-02-02T05:05:42Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:52:09.721765Z"}],"nvd":[{"id":"CVE-2015-8461","description":"Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.","status":"published","published":"2015-12-16T15:59:02.57Z","modified":"2026-06-17T00:34:36.947Z","cvss":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:03:14.501367Z"}],"osv":[{"id":"openSUSE-SU-2024:10650-1","title":"bind-9.16.20-1.4 on GA media","description":"These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:52:09.525836Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}