← back
CVE-2015-1349

CVE-2015-1349

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 22%
exploitation probability
22%top 2% of all CVEs
observed exploitation
nono source reports it
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
Affected products
n/a · n/a
References
http://advisories.mageia.org/MGASA-2015-0082.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00004.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/150904.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/150905.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.htmlhttp://lists.opensuse.org/opensuse-updates/2015-07/msg00038.htmlhttp://marc.info/?l=bugtraq&m=143740940810833&w=2http://rhn.redhat.com/errata/RHSA-2015-0672.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1193820https://kb.isc.org/article/AA-01235https://kb.juniper.net/JSA10783