CVE-2015-8000
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 56%
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
1 product
Red Hat Enterprise Linux 4
no_fix_planned: Will not fix
Fixed
27 products (1,332 components)
Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Desktop Workstation (v. 5 client) · Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · Red Hat Enterprise Linux ComputeNode (v. 7) · and others 22
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
Affected products
n/a · n/aReferences
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174143.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-December/174520.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00028.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00034.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00035.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.htmlhttp://marc.info/?l=bugtraq&m=145680832702035&w=2