← Vulnerability feed

Vulnerability record · CVE-2015-5986 · published 5 September 2015

CVE-2015-5986: Isc bind improper input validation vulnerability

Isc · Bind

openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.

7.1 CVSS 2.0 High EPSS 26% · top 2.1% CWE-20 · Improper input validation
7.1CVSS 2.0 base score
26%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
28References
17 Jun 2026Last modified by NVD

Description

openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html
http://www.securityfocus.com/bid/76618
http://www.securitytracker.com/id/1033453
https://kb.isc.org/article/AA-01291 Vendor Advisory
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01438
https://kc.mcafee.com/corporate/index?page=content&id=SB10134
https://security.gentoo.org/glsa/201510-01
https://security.netapp.com/advisory/ntap-20190730-0001/
https://support.apple.com/HT205376
http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html
http://www.securityfocus.com/bid/76618
http://www.securitytracker.com/id/1033453
https://kb.isc.org/article/AA-01291 Vendor Advisory
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01438
https://kc.mcafee.com/corporate/index?page=content&id=SB10134
https://security.gentoo.org/glsa/201510-01
https://security.netapp.com/advisory/ntap-20190730-0001/
https://support.apple.com/HT205376

Track CVE-2015-5986 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-5911Apple mac os x server vulnerabilityMultiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML…EPSS 2.0%10.0CVE-2010-0055Apple mac os x vulnerabilityxar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified packa…EPSS 2.0%10.0CVE-2010-0508Apple mac os x vulnerabilityMail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attac…EPSS 1.5%10.0CVE-2010-1119Apple safari vulnerabilityUse-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and …EPSS 19%10.0CVE-2009-2193Apple mac os x memory buffer overflow vulnerabilityBuffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (sy…EPSS 9.5%10.0CVE-2009-1236Apple mac os x memory buffer overflow vulnerabilityHeap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attacker…EPSS 8.4%10.0CVE-2009-0138Apple mac os x improper authentication vulnerabilityservermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify t…EPSS 4.2%10.0CVE-2009-0012Apple mac os x memory buffer overflow vulnerabilityHeap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.EPSS 5.4%

Source: NIST National Vulnerability Database (record CVE-2015-5986), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.