CVE-2015-5722 in the critical feed json
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (asserti…
published 2015-09-05 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-5669
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 34.9%
- EPSS 34.9% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Patch / fix
- bind9 Debian 14, Debian 13, Debian 12 1:9.9.5.dfsg-12
debian advisories DEBIAN-CVE-2015-5722
- bind9 Ubuntu 14.04 LTS 1:9.9.5.dfsg-3ubuntu0.5
ubuntu advisories UBUNTU-CVE-2015-5722
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- bind97 RHEL 5 32:9.7.0-21.P2.el5_11.3
- bind97-libs RHEL 5 32:9.7.0-21.P2.el5_11.3
- bind97-utils RHEL 5 32:9.7.0-21.P2.el5_11.3
- bind97-chroot RHEL 5 32:9.7.0-21.P2.el5_11.3
- bind RHEL 5 30:9.3.6-25.P1.el5_11.4
- bind-sdb RHEL 5 30:9.3.6-25.P1.el5_11.4
- bind-libs RHEL 5 30:9.3.6-25.P1.el5_11.4
- bind-utils RHEL 5 30:9.3.6-25.P1.el5_11.4
red hat advisories RHSA-2016:0079RHSA-2016:0078RHSA-2015:1707RHSA-2015:1706RHSA-2015:1705
- bind SLES 11 SP1-TERADATA, SLES 11 SP1-LTSS 9.6ESVR11W1-0.9.1
- bind SLES for SAP 11 SP4, SLES for SAP 11 SP3, SLES 11 SP4 +7 more 9.9.6P1-0.15.1
- bind SLES for SAP 12, SLES 12, SLED 12 +1 more 9.9.6P1-26.1
suse advisories SUSE-SU-2015:1496-1SUSE-SU-2015:1480-1SUSE-SU-2015:1481-1
- bind openSUSE Tumbleweed 9.10.3P4-21.1
opensuse advisories openSUSE-SU-2024:10467-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2015-5722 updated cvss 5.0
bind: malformed DNSSEC key failed assertion denial of service
-
Red Hat Enterprise Linux 4 bindaffected: no fix available
-
Red Hat Enterprise Linux (v. 5 server) bind 9.3.6-25.P1.el5_11.4, bind97 9.7.0-21.P2.el5_11.3, bind-sdb 9.3.6-25.P1.el5_11.4, bind-libs 9.3.6-25.P1.el5_11.4, bind-utils 9.3.6-25.P1.el5_11.4, bind-chroot 9.3.6-25.P1.el5_11.4, +4 morefixed: vendor fix RHSA-2015:1706
-
Red Hat Enterprise Linux Client (v. 7) bind 9.9.4-18.el7_1.5, bind-libs 9.9.4-18.el7_1.5, bind-utils 9.9.4-18.el7_1.5, bind-license 9.9.4-18.el7_1.5, bind-libs-lite 9.9.4-18.el7_1.5 Red Hat Enterprise Linux Client Optional (v. 7) bind 9.9.4-18.el7_1.5, bind-sdb 9.9.4-18.el7_1.5, bind-chroot 9.9.4-18.el7_1.5, bind-sdb-chroot 9.9.4-18.el7_1.5 Red Hat Enterprise Linux ComputeNode (v. 7) bind 9.9.4-18.el7_1.5, bind-libs 9.9.4-18.el7_1.5, bind-utils 9.9.4-18.el7_1.5, bind-license 9.9.4-18.el7_1.5, bind-libs-lite 9.9.4-18.el7_1.5 Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind 9.9.4-18.el7_1.5, bind-sdb 9.9.4-18.el7_1.5, bind-chroot 9.9.4-18.el7_1.5, bind-sdb-chroot 9.9.4-18.el7_1.5fixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux Desktop (v. 5 client) bind 9.3.6-25.P1.el5_11.4, bind-sdb 9.3.6-25.P1.el5_11.4, bind-libs 9.3.6-25.P1.el5_11.4, bind-utils 9.3.6-25.P1.el5_11.4fixed: vendor fix RHSA-2015:1706
-
Red Hat Enterprise Linux Desktop (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-libs 9.8.2-0.37.rc1.el6_7.4, bind-utils 9.8.2-0.37.rc1.el6_7.4 Red Hat Enterprise Linux Desktop Optional (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-sdb 9.8.2-0.37.rc1.el6_7.4, bind-chroot 9.8.2-0.37.rc1.el6_7.4fixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind 9.3.6-25.P1.el5_11.4, bind97 9.7.0-21.P2.el5_11.3, bind-chroot 9.3.6-25.P1.el5_11.4, bind97-libs 9.7.0-21.P2.el5_11.3, bind97-utils 9.7.0-21.P2.el5_11.3, bind97-chroot 9.7.0-21.P2.el5_11.3, +1 morefixed: vendor fix RHSA-2015:1706
-
Red Hat Enterprise Linux HPC Node (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-libs 9.8.2-0.37.rc1.el6_7.4, bind-utils 9.8.2-0.37.rc1.el6_7.4fixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-libs 9.8.2-0.30.rc1.el6_6.4, bind-utils 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
show 9 moreshow fewer
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-sdb 9.8.2-0.37.rc1.el6_7.4, bind-chroot 9.8.2-0.37.rc1.el6_7.4fixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-sdb 9.8.2-0.30.rc1.el6_6.4, bind-chroot 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Server (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-libs 9.8.2-0.37.rc1.el6_7.4, bind-utils 9.8.2-0.37.rc1.el6_7.4, bind-chroot 9.8.2-0.37.rc1.el6_7.4 Red Hat Enterprise Linux Server (v. 7) bind 9.9.4-18.el7_1.5, bind 9.9.4-18.ael7b_1.5, bind-libs 9.9.4-18.el7_1.5, bind-utils 9.9.4-18.el7_1.5, bind-chroot 9.9.4-18.el7_1.5, bind-libs 9.9.4-18.ael7b_1.5, +6 morefixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux Server AUS (v. 6.4) bind 9.8.2-0.17.rc1.el6_4.7, bind-libs 9.8.2-0.17.rc1.el6_4.7, bind-utils 9.8.2-0.17.rc1.el6_4.7, bind-chroot 9.8.2-0.17.rc1.el6_4.7 Red Hat Enterprise Linux Server AUS (v. 6.5) bind 9.8.2-0.23.rc1.el6_5.2, bind-libs 9.8.2-0.23.rc1.el6_5.2, bind-utils 9.8.2-0.23.rc1.el6_5.2, bind-chroot 9.8.2-0.23.rc1.el6_5.2fixed: vendor fix RHSA-2016:0078
-
Red Hat Enterprise Linux Server EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-libs 9.8.2-0.30.rc1.el6_6.4, bind-utils 9.8.2-0.30.rc1.el6_6.4, bind-chroot 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Server Optional (v. 6) bind-sdb 9.8.2-0.37.rc1.el6_7.4 Red Hat Enterprise Linux Server Optional (v. 7) bind-sdb 9.9.4-18.el7_1.5, bind-sdb 9.9.4-18.ael7b_1.5, bind-sdb-chroot 9.9.4-18.el7_1.5, bind-sdb-chroot 9.9.4-18.ael7b_1.5fixed: vendor fix RHSA-2015:1705
-
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind 9.8.2-0.17.rc1.el6_4.7, bind-sdb 9.8.2-0.17.rc1.el6_4.7 Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind 9.8.2-0.23.rc1.el6_5.2, bind-sdb 9.8.2-0.23.rc1.el6_5.2fixed: vendor fix RHSA-2016:0078
-
Red Hat Enterprise Linux Server Optional EUS (v. 6.6) bind-sdb 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Workstation (v. 6) bind 9.8.2-0.37.rc1.el6_7.4, bind-libs 9.8.2-0.37.rc1.el6_7.4, bind-utils 9.8.2-0.37.rc1.el6_7.4, bind-chroot 9.8.2-0.37.rc1.el6_7.4 Red Hat Enterprise Linux Workstation (v. 7) bind 9.9.4-18.el7_1.5, bind-libs 9.9.4-18.el7_1.5, bind-utils 9.9.4-18.el7_1.5, bind-chroot 9.9.4-18.el7_1.5, bind-license 9.9.4-18.el7_1.5, bind-libs-lite 9.9.4-18.el7_1.5 Red Hat Enterprise Linux Workstation Optional (v. 6) bind-sdb 9.8.2-0.37.rc1.el6_7.4 Red Hat Enterprise Linux Workstation Optional (v. 7) bind-sdb 9.9.4-18.el7_1.5, bind-sdb-chroot 9.9.4-18.el7_1.5fixed: vendor fix RHSA-2015:1705
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
34.93% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
ubuntu.com
/usn/USN-2728-1
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-10/msg00002.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-September/165996.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1706.html
vendor-advisory
-
lists.apple.com
/archives/security-announce/2015/Oct/msg00009.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-September/165810.html
vendor-advisory
-
marc.info
/?l=bugtraq&m=144294073801304&w=2
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0079.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-09/msg00006.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-09/msg00012.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1707.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-September/165750.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-October/168686.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-09/msg00020.html
vendor-advisory
-
security.gentoo.org
/glsa/201510-01
vendor-advisory
-
debian.org
/security/2015/dsa-3350
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-09/msg00005.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0078.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-01/msg00033.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-September/167465.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1705.html
vendor-advisory
-
kb.isc.org
/article/AA-01287
vendor-advisory
- oracle.com /technetwork/topics/security/ovmbulletinjul2016-3090546.html
- kb.isc.org /article/AA-01438
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
- oracle.com /technetwork/topics/security/bulletinjul2015-2511963.html
- support.apple.com /HT205376
- h20564.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04891218
- kc.mcafee.com /corporate/index?page=content&id=SB10134
- kb.isc.org /article/AA-01307
-
securitytracker.com
/id/1033452
vdb-entry
-
securityfocus.com
/bid/76605
vdb-entry
- h20564.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
- h20564.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923105
- kb.isc.org /article/AA-01305
- kb.isc.org /article/AA-01306
- security.netapp.com /advisory/ntap-20190730-0001/
Sources
- CVE List CVE-2015-5722
- NVD CVE-2015-5722
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.