CVE-2015-8000

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 55.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-16 · updated 2026-06-17
Weakness: CWE-20

Description

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.

Affected products

ISC BIND: 8.4.7, 9.0, 9.0.1, 9.1, 9.1.1, 9.1.2 (+158)
Oracle Corporation Oracle Linux: 5.0, 6, 7
Oracle Corporation Solaris Operating System: 10, 11.3
Oracle Vm Server: 3.2

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174143.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174520.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00034.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00035.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00036.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00042.html
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
http://marc.info/?l=bugtraq&m=145680832702035&w=2

Get alerted when CVE-2015-8000 or the next vulnerability affects your stack