Description
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-163-1 | bind9 security update |
Debian DSA |
DSA-3162-1 | bind9 security update |
Ubuntu USN |
USN-2503-1 | Bind vulnerability |
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T04:40:18.567Z
Reserved: 2015-01-23T00:00:00.000Z
Link: CVE-2015-1349
No data.
Status : Modified
Published: 2015-02-19T03:01:22.287
Modified: 2026-05-06T22:30:45.220
Link: CVE-2015-1349
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN