CVE-2015-4620: High severity isc bind 9 vulnerability

Published Jul 8, 2015

Updated

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.

Affected Software

95 affected components

ISC BIND=9.7.0

ISC BIND=9.7.0-b1

ISC BIND=9.7.0-p1

ISC BIND=9.7.0-p2

ISC BIND=9.7.0-rc1

ISC BIND=9.7.0-rc2

ISC BIND=9.7.1

ISC BIND=9.7.1-p1

ISC BIND=9.7.1-p2

ISC BIND=9.7.1-rc1

ISC BIND=9.7.2

ISC BIND=9.7.2-p1

ISC BIND=9.7.2-p2

ISC BIND=9.7.2-p3

ISC BIND=9.7.2-rc1

ISC BIND=9.7.3

ISC BIND=9.7.3-b1

ISC BIND=9.7.3-p1

ISC BIND=9.7.3-rc1

ISC BIND=9.7.4

ISC BIND=9.7.4-b1

ISC BIND=9.7.4-p1

ISC BIND=9.7.4-rc1

ISC BIND=9.7.5

ISC BIND=9.7.5-b1

ISC BIND=9.7.5-rc1

ISC BIND=9.7.5-rc2

ISC BIND=9.7.6

ISC BIND=9.7.6-p1

ISC BIND=9.7.6-p2

ISC BIND=9.7.7

ISC BIND=9.8.0

ISC BIND=9.8.0-a1

ISC BIND=9.8.0-b1

ISC BIND=9.8.0-p1

ISC BIND=9.8.0-p2

ISC BIND=9.8.0-p4

ISC BIND=9.8.0-rc1

ISC BIND=9.8.1

ISC BIND=9.8.1-b1

ISC BIND=9.8.1-b2

ISC BIND=9.8.1-b3

ISC BIND=9.8.1-p1

ISC BIND=9.8.1-rc1

ISC BIND=9.8.2-b1

ISC BIND=9.8.2-rc1

ISC BIND=9.8.2-rc2

ISC BIND=9.8.3

ISC BIND=9.8.3-p1

ISC BIND=9.8.3-p2

ISC BIND=9.8.4

ISC BIND=9.8.5

ISC BIND=9.8.5-b1

ISC BIND=9.8.5-b2

ISC BIND=9.8.5-p1

ISC BIND=9.8.5-p2

ISC BIND=9.8.5-rc1

ISC BIND=9.8.5-rc2

ISC BIND=9.8.6-b1

ISC BIND=9.8.6-rc1

ISC BIND=9.8.6-rc2

ISC BIND=9.9.0

ISC BIND=9.9.0-a1

ISC BIND=9.9.0-a2

ISC BIND=9.9.0-a3

ISC BIND=9.9.0-b1

ISC BIND=9.9.0-b2

ISC BIND=9.9.0-rc1

ISC BIND=9.9.0-rc2

ISC BIND=9.9.0-rc3

ISC BIND=9.9.0-rc4

ISC BIND=9.9.1

ISC BIND=9.9.1-p1

ISC BIND=9.9.1-p2

ISC BIND=9.9.2

ISC BIND=9.9.3

ISC BIND=9.9.3-b1

ISC BIND=9.9.3-b2

ISC BIND=9.9.3-p1

ISC BIND=9.9.3-p2

ISC BIND=9.9.3-rc1

ISC BIND=9.9.3-rc2

ISC BIND=9.9.4-b1

ISC BIND=9.9.5

ISC BIND=9.9.6

ISC BIND=9.9.6-p1

ISC BIND=9.9.7-b1

ISC BIND=9.9.7-rc1

ISC BIND=9.9.7-rc2

ISC BIND=9.10.0

ISC BIND=9.10.1

ISC BIND=9.10.1-p1

ISC BIND=9.10.2-b1

ISC BIND=9.10.2-p1

ISC BIND=9.10.2-rc1

Event History

Jul 8, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4620?

The severity of CVE-2015-4620 is considered critical as it can lead to a denial of service.

How do I fix CVE-2015-4620?

To fix CVE-2015-4620, you should update ISC BIND to versions 9.9.7-P1, 9.10.2-P2, or later.

What products are affected by CVE-2015-4620?

CVE-2015-4620 affects ISC BIND versions 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2.

What type of attack is related to CVE-2015-4620?

CVE-2015-4620 allows remote attackers to construct crafted zone data that causes a REQUIRE assertion failure.

Is there a workaround for CVE-2015-4620?

A workaround for CVE-2015-4620 involves disabling DNSSEC validation, though this is not recommended as a permanent solution.