CVE-2015-8461

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-16 · updated 2026-06-17
Weakness: CWE-362

Description

Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.

Affected products

ISC BIND: 8.4.7, 9.0, 9.0.1, 9.1, 9.1.1, 9.1.2 (+158)

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html
http://www.securityfocus.com/bid/79347
http://www.securitytracker.com/id/1034419
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966
https://kb.isc.org/article/AA-01319
https://kb.isc.org/article/AA-01380
https://kb.isc.org/article/AA-01438
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html
http://www.securityfocus.com/bid/79347
http://www.securitytracker.com/id/1034419

Get alerted when CVE-2015-8461 or the next vulnerability affects your stack