Description
Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034419
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html
Various Sources x_refsource_confirm
https://kb.isc.org/article/AA-01438
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/79347
Various Sources x_refsource_confirm
https://kb.isc.org/article/AA-01380
Vendor Advisory vendor-advisory
x_refsource_slackware
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966
Vendor Advisory x_refsource_confirm
https://kb.isc.org/article/AA-01319
Scores
EPSS
0.1600
EPSS Percentile
94.9%
Details
CWE
CWE-362
Status
published
Products (33)
isc/bind
8.4.7
isc/bind
9.0
isc/bind
9.0.1
isc/bind
9.1
isc/bind
9.1.1
isc/bind
9.1.2
isc/bind
9.1.3
isc/bind
9.2
isc/bind
9.2.0
isc/bind
9.2.1
... and 23 more
Published
Dec 16, 2015
Tracked Since
Feb 18, 2026