CVE-2015-1349

bind: issue in trust anchor management can cause named to crash

Published Feb 19, 2015 CVSS 2.0 · 5.4 Medium EPSS 22.9% KEV · Not listed
Description
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-163-1 bind9 security update
Debian DSA Debian DSA DSA-3162-1 bind9 security update
Ubuntu USN Ubuntu USN USN-2503-1 Bind vulnerability
History
Type Values Removed Values Added
Metrics epss

{'score': 0.25137}

epss

{'score': 0.27043}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 4:40 AM
Reserved
Jan 23, 2015, 12:00 AM
Status
Modified
Published
Feb 19, 2015, 3:01 AM
Modified
Jun 17, 2026, 12:22 AM
Severity
Moderate
Public date
Feb 20, 2015, 12:00 AM