CVE-2015-8705

Published Jan 20, 2016

Last updated 6 years ago

Overview

Description
buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 3.0

Type
Primary
Base score
7
Impact score
4.7
Exploitability score
2.2
Vector string
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
6.6
Impact score
8.5
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:P/I:P/A:C

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations