6.8

CVE-2015-8704: isc bind Improper Input Validation

CVSS: 6.8v2.0MediumModified
AliasesSUSE-SU-2016:0174-1SUSE-SU-2016:0180-1SUSE-SU-2016:0200-1
Published 20-01-2016Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2015-8704 is a medium (CVSS 6.8) Improper Input Validation vulnerability in isc bind. EPSS estimates a 20.33% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
20.33%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2016-0030OPENSUSE-SU-2024:10467-1

Timeline

  1. 20-01-2016
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

20.33%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 20.33% on 19-09-2026

19-09-202619-10-2026
EPSS score
20.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat23 products
  • bind< 30:9.3.6-25.P1.el5_11.6 | < 32:9.8.2-0.37.rc1.el6_7.6 | < 32:9.9.4-29.el7_2.2
  • bind-chroot< 30:9.3.6-25.P1.el5_11.6 | < 32:9.8.2-0.37.rc1.el6_7.6 | < 32:9.9.4-29.el7_2.2
  • bind-debuginfo< 30:9.3.6-25.P1.el5_11.6 | < 32:9.8.2-0.37.rc1.el6_7.6 | < 32:9.9.4-29.el7_2.2
  • bind-devel< 30:9.3.6-25.P1.el5_11.6 | < 32:9.8.2-0.37.rc1.el6_7.6 | < 32:9.9.4-29.el7_2.2
  • bind-libbind-devel< 30:9.3.6-25.P1.el5_11.6
Suse18 products
  • bind&distro=SUSE Linux Enterprise Desktop 11 SP3< 9.9.6P1-0.22.1
  • bind&distro=SUSE Linux Enterprise Desktop 11 SP4< 9.9.6P1-0.22.1
  • bind&distro=SUSE Linux Enterprise Desktop 12< 9.9.6P1-28.9.1
  • bind&distro=SUSE Linux Enterprise Desktop 12 SP1< 9.9.6P1-35.1
  • bind&distro=SUSE Linux Enterprise Server 11 SP2-LTSS< 9.9.6P1-0.22.1
Debian1 product
  • bind9< 1:9.10.3.dfsg.P4-6 | < 1:9.7.3.dfsg-1~squeeze19 | < 1:9.8.4.dfsg.P1-6+nmu2+deb7u9 | < 1:9.9.5.dfsg-9+deb8u5
Isc1 product
  • bind9.0 | 9.0.1 | 9.1 | 9.1.1 | 9.1.2 | 9.1.3 | 9.2 | 9.2.0 | 9.2.1 | 9.2.2 | 9.2.2:p3 | 9.2.3 | 9.2.4 | 9.2.5 | 9.2.6 | 9.2.7 | 9.3 | 9.3.0 | 9.3.1 | 9.3.2 | 9.3.3 | 9.4 | 9.4.0 | 9.4.0:rc1 | 9.4.1 | 9.4.2 | 9.4.3 | 9.4.3:rc1 | 9.5 | 9.5.0 | 9.5.0:rc1 | 9.5.1 | 9.5.1:rc1 | 9.5.1:rc2 | 9.5.2 | 9.5.2:rc1 | 9.5.3 | 9.5.3:rc1 | 9.6 | 9.6:r5_p1 | 9.6:r6_b1 | 9.6:r6_rc1 | 9.6:r6_rc2 | 9.6:r7_p1 | 9.6:r7_p2 | 9.9.8:p2 | 9.10.1 | 9.10.1:p1 | 9.10.2 | 9.10.2:b1 | 9.10.2:p1 | 9.10.2:p2 | 9.10.2:p3 | 9.10.2:p4 | 9.10.2:rc1 | 9.10.3 | 9.10.3:p1 | 9.10.3:p2 | 9.10.3:rc1
Ubuntu1 product
  • bind9< 1:9.9.5.dfsg-3ubuntu0.7

5 vendors · 44 products

References

44 links
Show all 44 references