CVE-2015-8704: Input Validation

Published Jan 20, 2016

Updated

apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.

Affected Software

59 affected components

ISC BIND=9.0

ISC BIND=9.0.1

ISC BIND=9.1

ISC BIND=9.1.1

ISC BIND=9.1.2

ISC BIND=9.1.3

ISC BIND=9.2

ISC BIND=9.2.0

ISC BIND=9.2.1

ISC BIND=9.2.2

ISC BIND=9.2.2-p3

ISC BIND=9.2.3

ISC BIND=9.2.4

ISC BIND=9.2.5

ISC BIND=9.2.6

ISC BIND=9.2.7

ISC BIND=9.3

ISC BIND=9.3.0

ISC BIND=9.3.1

ISC BIND=9.3.2

ISC BIND=9.3.3

ISC BIND=9.4

ISC BIND=9.4.0

ISC BIND=9.4.0-rc1

ISC BIND=9.4.1

ISC BIND=9.4.2

ISC BIND=9.4.3

ISC BIND=9.4.3-rc1

ISC BIND=9.5

ISC BIND=9.5.0

ISC BIND=9.5.0-rc1

ISC BIND=9.5.1

ISC BIND=9.5.1-rc1

ISC BIND=9.5.1-rc2

ISC BIND=9.5.2

ISC BIND=9.5.2-rc1

ISC BIND=9.5.3

ISC BIND=9.5.3-rc1

ISC BIND=9.6

ISC BIND=9.6-r5_p1

ISC BIND=9.6-r6_b1

ISC BIND=9.6-r6_rc1

ISC BIND=9.6-r6_rc2

ISC BIND=9.6-r7_p1

ISC BIND=9.6-r7_p2

ISC BIND=9.9.8-p2

ISC BIND=9.10.1

ISC BIND=9.10.1-p1

ISC BIND=9.10.2

ISC BIND=9.10.2-b1

ISC BIND=9.10.2-p1

ISC BIND=9.10.2-p2

ISC BIND=9.10.2-p3

ISC BIND=9.10.2-p4

ISC BIND=9.10.2-rc1

ISC BIND=9.10.3

ISC BIND=9.10.3-p1

ISC BIND=9.10.3-p2

ISC BIND=9.10.3-rc1

Event History

Jan 20, 2016

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8704?

CVE-2015-8704 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2015-8704?

To fix CVE-2015-8704, upgrade to ISC BIND version 9.9.8-P3 or later, or 9.10.3-P3 or later.

What types of systems are affected by CVE-2015-8704?

CVE-2015-8704 affects ISC BIND versions 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3.

What attack vector is used in CVE-2015-8704?

CVE-2015-8704 can be exploited by remote authenticated users through a malformed Address Prefix List (APL) record.

What impact does CVE-2015-8704 have on systems?

CVE-2015-8704 can lead to a denial of service due to INSIST assertion failure, resulting in the daemon exiting.