VULNERABILITY INTELLIGENCE
CVE-2015-8705
CVSS score7 HIGH
EPSS probability7.72%
CISA KEVNot currently listed
Published2016-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Description
buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
Weakness classification
- CWE-20: Improper Input Validation