buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service…

Description

buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.

Scores

EPSS (exploitation in 30 days)

34.9% · top 1.6% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a
• CWE-20 (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• n/a

  • affected n/a

References (37)

• USN-2728-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• openSUSE-SU-2015:1667 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• FEDORA-2015-15041 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• RHSA-2015:1706 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• APPLE-SA-2015-10-21-8 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• https://kb.isc.org/article/AA-01438 (opens in a new tab)x_refsource_CONFIRMx_transferred
• FEDORA-2015-14954 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• https://kb.isc.org/article/AA-01287 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SSRT102248 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• RHSA-2016:0079 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://support.apple.com/HT205376 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04891218 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SUSE-SU-2015:1481 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://kc.mcafee.com/corporate/index?page=content&id=SB10134 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SUSE-SU-2015:1496 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://kb.isc.org/article/AA-01307 (opens in a new tab)x_refsource_CONFIRMx_transferred
• RHSA-2015:1707 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• FEDORA-2015-15062 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• FEDORA-2015-15061 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• 1033452 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• openSUSE-SU-2015:1597 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• GLSA-201510-01 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 76605 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• DSA-3350 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SUSE-SU-2015:1480 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923105 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://kb.isc.org/article/AA-01305 (opens in a new tab)x_refsource_CONFIRMx_transferred
• RHSA-2016:0078 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• SUSE-SU-2016:0227 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://kb.isc.org/article/AA-01306 (opens in a new tab)x_refsource_CONFIRMx_transferred
• FEDORA-2015-14958 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• RHSA-2015:1705 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• https://security.netapp.com/advisory/ntap-20190730-0001/ (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2015-5722](https://trackcve.app/badge/CVE-2015-5722.svg)](https://trackcve.app/cve/CVE-2015-5722)

Record last updated 6 Aug 2024, 06:59 UTC.