CVE-2015-8704

原文の説明

apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.

影響を受けるソフトウェア

• BIND 9 = 9.5.1= 9.0= 9.2.3= 9.6= 9.2.7= 9.5.0 完全一致

詳細

公開日

2016-01-20

最終更新

2026-06-17

CVSS ベクター

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-20

参考資料

• cve.org/CVE-2015-8704
• nvd.nist.gov/vuln/detail/CVE-2015-8704
• lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html
• lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
• marc.info/?l=bugtraq&m=145680832702035&w=2