name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-07-08T14:00:00

Updated: 2024-08-06T06:18:12.213Z

Reserved: 2015-06-16T00:00:00

Link: CVE-2015-4620

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-07-08T14:59:04.767

Modified: 2024-11-21T02:31:25.150

Link: CVE-2015-4620

cve-icon Redhat

Severity : Important

Publid Date: 2015-07-07T00:00:00Z

Links: CVE-2015-4620 - Bugzilla