CVE-2015-8704
N/A
Published: January 20, 2016 at 03:00 PM UTC
Updated: June 17, 2026 at 12:35 AM UTC
1 product affected across 1 vendorBIND
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 20%
Description
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
9.09.0.19.19.1.19.1.29.1.39.10.19.10.1 p19.10.29.10.2 b19.10.2 p19.10.2 p29.10.2 p39.10.2 p49.10.2 rc19.10.39.10.3 p19.10.3 p29.10.3 rc19.29.2.09.2.19.2.29.2.2 p39.2.39.2.49.2.59.2.69.2.79.39.3.09.3.19.3.29.3.39.49.4.09.4.0 rc19.4.19.4.29.4.39.4.3 rc19.59.5.09.5.0 rc19.5.19.5.1 rc19.5.1 rc29.5.29.5.2 rc19.5.39.5.3 rc19.69.6 r5_p19.6 r6_b19.6 r6_rc19.6 r6_rc29.6 r7_p19.6 r7_p29.9.8 p2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html
References (27)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.htmlQuick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card