Vulnerability Description
openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
CVSS Score
7.1
HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Isc | Bind | <= 9.9.7 |
| Apple | Mac Os X Server | 5.0.15 |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.
- http://www.securityfocus.com/bid/76618
- http://www.securitytracker.com/id/1033453
- https://kb.isc.org/article/AA-01291Vendor Advisory
- https://kb.isc.org/article/AA-01305
- https://kb.isc.org/article/AA-01306
- https://kb.isc.org/article/AA-01307
- https://kb.isc.org/article/AA-01438
- https://kc.mcafee.com/corporate/index?page=content&id=SB10134
- https://security.gentoo.org/glsa/201510-01
- https://security.netapp.com/advisory/ntap-20190730-0001/
- https://support.apple.com/HT205376
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html
FAQ
What is CVE-2015-5986?
CVE-2015-5986 is a vulnerability with a CVSS score of 7.1 (HIGH). openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DN...
How severe is CVE-2015-5986?
CVE-2015-5986 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5986?
Check the references section above for vendor advisories and patch information. Affected products include: Isc Bind, Apple Mac Os X Server.