CVE-2015-4620
Summary
| CVE | CVE-2015-4620 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-07-08 14:59:04 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:L/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Isc | Bind | 9.10.0 | All | All | All |
| Application | Isc | Bind | 9.10.1 | All | All | All |
| Application | Isc | Bind | 9.10.1 | p1 | All | All |
| Application | Isc | Bind | 9.10.2 | b1 | All | All |
| Application | Isc | Bind | 9.10.2 | p1 | All | All |
| Application | Isc | Bind | 9.10.2 | rc1 | All | All |
| Application | Isc | Bind | 9.7.0 | All | All | All |
| Application | Isc | Bind | 9.7.0 | b1 | All | All |
| Application | Isc | Bind | 9.7.0 | p1 | All | All |
| Application | Isc | Bind | 9.7.0 | p2 | All | All |
| Application | Isc | Bind | 9.7.0 | rc1 | All | All |
| Application | Isc | Bind | 9.7.0 | rc2 | All | All |
| Application | Isc | Bind | 9.7.1 | All | All | All |
| Application | Isc | Bind | 9.7.1 | p1 | All | All |
| Application | Isc | Bind | 9.7.1 | p2 | All | All |
| Application | Isc | Bind | 9.7.1 | rc1 | All | All |
| Application | Isc | Bind | 9.7.2 | All | All | All |
| Application | Isc | Bind | 9.7.2 | p1 | All | All |
| Application | Isc | Bind | 9.7.2 | p2 | All | All |
| Application | Isc | Bind | 9.7.2 | p3 | All | All |
| Application | Isc | Bind | 9.7.2 | rc1 | All | All |
| Application | Isc | Bind | 9.7.3 | All | All | All |
| Application | Isc | Bind | 9.7.3 | b1 | All | All |
| Application | Isc | Bind | 9.7.3 | p1 | All | All |
| Application | Isc | Bind | 9.7.3 | rc1 | All | All |
| Application | Isc | Bind | 9.7.4 | All | All | All |
| Application | Isc | Bind | 9.7.4 | b1 | All | All |
| Application | Isc | Bind | 9.7.4 | p1 | All | All |
| Application | Isc | Bind | 9.7.4 | rc1 | All | All |
| Application | Isc | Bind | 9.7.5 | All | All | All |
| Application | Isc | Bind | 9.7.5 | b1 | All | All |
| Application | Isc | Bind | 9.7.5 | rc1 | All | All |
| Application | Isc | Bind | 9.7.5 | rc2 | All | All |
| Application | Isc | Bind | 9.7.6 | All | All | All |
| Application | Isc | Bind | 9.7.6 | p1 | All | All |
| Application | Isc | Bind | 9.7.6 | p2 | All | All |
| Application | Isc | Bind | 9.7.7 | All | All | All |
| Application | Isc | Bind | 9.8.0 | All | All | All |
| Application | Isc | Bind | 9.8.0 | a1 | All | All |
| Application | Isc | Bind | 9.8.0 | b1 | All | All |
| Application | Isc | Bind | 9.8.0 | p1 | All | All |
| Application | Isc | Bind | 9.8.0 | p2 | All | All |
| Application | Isc | Bind | 9.8.0 | p4 | All | All |
| Application | Isc | Bind | 9.8.0 | rc1 | All | All |
| Application | Isc | Bind | 9.8.1 | All | All | All |
| Application | Isc | Bind | 9.8.1 | b1 | All | All |
| Application | Isc | Bind | 9.8.1 | b2 | All | All |
| Application | Isc | Bind | 9.8.1 | b3 | All | All |
| Application | Isc | Bind | 9.8.1 | p1 | All | All |
| Application | Isc | Bind | 9.8.1 | rc1 | All | All |
| Application | Isc | Bind | 9.8.2 | b1 | All | All |
| Application | Isc | Bind | 9.8.2 | rc1 | All | All |
| Application | Isc | Bind | 9.8.2 | rc2 | All | All |
| Application | Isc | Bind | 9.8.3 | All | All | All |
| Application | Isc | Bind | 9.8.3 | p1 | All | All |
| Application | Isc | Bind | 9.8.3 | p2 | All | All |
| Application | Isc | Bind | 9.8.4 | All | All | All |
| Application | Isc | Bind | 9.8.5 | All | All | All |
| Application | Isc | Bind | 9.8.5 | b1 | All | All |
| Application | Isc | Bind | 9.8.5 | b2 | All | All |
| Application | Isc | Bind | 9.8.5 | p1 | All | All |
| Application | Isc | Bind | 9.8.5 | p2 | All | All |
| Application | Isc | Bind | 9.8.5 | rc1 | All | All |
| Application | Isc | Bind | 9.8.5 | rc2 | All | All |
| Application | Isc | Bind | 9.8.6 | b1 | All | All |
| Application | Isc | Bind | 9.8.6 | rc1 | All | All |
| Application | Isc | Bind | 9.8.6 | rc2 | All | All |
| Application | Isc | Bind | 9.9.0 | All | All | All |
| Application | Isc | Bind | 9.9.0 | a1 | All | All |
| Application | Isc | Bind | 9.9.0 | a2 | All | All |
| Application | Isc | Bind | 9.9.0 | a3 | All | All |
| Application | Isc | Bind | 9.9.0 | b1 | All | All |
| Application | Isc | Bind | 9.9.0 | b2 | All | All |
| Application | Isc | Bind | 9.9.0 | rc1 | All | All |
| Application | Isc | Bind | 9.9.0 | rc2 | All | All |
| Application | Isc | Bind | 9.9.0 | rc3 | All | All |
| Application | Isc | Bind | 9.9.0 | rc4 | All | All |
| Application | Isc | Bind | 9.9.1 | All | All | All |
| Application | Isc | Bind | 9.9.1 | p1 | All | All |
| Application | Isc | Bind | 9.9.1 | p2 | All | All |
| Application | Isc | Bind | 9.9.2 | All | All | All |
| Application | Isc | Bind | 9.9.3 | All | All | All |
| Application | Isc | Bind | 9.9.3 | b1 | All | All |
| Application | Isc | Bind | 9.9.3 | b2 | All | All |
| Application | Isc | Bind | 9.9.3 | p1 | All | All |
| Application | Isc | Bind | 9.9.3 | p2 | All | All |
| Application | Isc | Bind | 9.9.3 | rc1 | All | All |
| Application | Isc | Bind | 9.9.3 | rc2 | All | All |
| Application | Isc | Bind | 9.9.4 | b1 | All | All |
| Application | Isc | Bind | 9.9.5 | All | All | All |
| Application | Isc | Bind | 9.9.6 | All | All | All |
| Application | Isc | Bind | 9.9.6 | p1 | All | All |
| Application | Isc | Bind | 9.9.7 | b1 | All | All |
| Application | Isc | Bind | 9.9.7 | rc1 | All | All |
| Application | Isc | Bind | 9.9.7 | rc2 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| USN-2669-1: Bind vulnerability | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| BIND 9.9.8-S1 Release Notes | Internet Systems Consortium Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | kb.isc.org | |
| [SECURITY] Fedora 21 Update: bind-9.9.6-9.P1.fc21 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| BIND: Denial of Service (GLSA 201510-01) — Gentoo Security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| 2017-04 Security Bulletin: Multiple Vulnerabilities in NorthStar Controller Application before version 2.1.0 Service Pack 1. - Juniper Networks | af854a3a-2127-422b-91ae-364da2661108 | kb.juniper.net | |
| openSUSE-SU-2015:1250-1: moderate: Security update for bind | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| ISC BIND 'isselfsigned()' Function Remote Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| '[security bulletin] HPSBUX03379 SSRT101976 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| BIND 9.10.3 Release Notes | Internet Systems Consortium Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | kb.isc.org | |
| CVE-2015-4620 ISC Bind Vulnerability in NetApp Products | NetApp Product Security | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | |
| [security-announce] SUSE-SU-2015:1205-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| CVE-2015-4620: Specially Constructed Zone Data Can Cause a Resolver to Crash when Validating | Internet Systems Consortium Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | kb.isc.org | Vendor Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| McAfee KnowledgeBase - Intel Security - Security Bulletin: Firewall Enterprise update fixes CVE-2015-4620 (BIND) vulnerability | af854a3a-2127-422b-91ae-364da2661108 | kc.mcafee.com | |
| [SECURITY] Fedora 22 Update: bind-9.10.2-3.P2.fc22 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| [security-announce] openSUSE-SU-2015:1326-1: important: Security update | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| BIND 9.9.8 Release Notes | Internet Systems Consortium Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | kb.isc.org | |
| ISC BIND DNSSEC Validation Flaw Lets Remote Users Deny Service in Certain Cases - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| 404 Page not found | af854a3a-2127-422b-91ae-364da2661108 | kb.isc.org | |
| Debian -- Security Information -- DSA-3304-1 bind9 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 15148 ISC BIND Denial of Service (DoS) Vulnerability (CVE-2015-4620)