CVE-2015-8000

Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.8-P2 and earlier ISC BIND 9.x versions 9.10.x through 9.10.3-P1

Description The issue is related to a denial of service caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this to trigger a REQUIRE assertion failure and cause a denial of service.

Recommendations For ISC BIND 9.x versions 9.9.8-P2 and earlier, update to version 9.9.8-P2 or later. For ISC BIND 9.x versions 9.10.x through 9.10.3-P1, update to version 9.10.3-P2 or later.