CVE-2015-8000
Mediumdb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
Published Dec 16, 2015 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2015-8000, DLA-370-1, DSA-3420-1, SUSE-SU-2015:2340-1, SUSE-SU-2015:2341-1, SUSE-SU-2015:2359-1, UBUNTU-CVE-2015-8000, USN-2837-1
Key Facts
Patch immediately- CVE-2015-8000 is a medium-severity vulnerability (CVSS 5.0 v2) affecting Bind (Isc), Linux (Oracle), Solaris (Oracle) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 55% probability of exploitation in the next 30 days.
- Fixed versions are available, including Bind 30:9.3.6-25.P1.el5_11.5, Bind 32:9.8.2-0.17.rc1.el6_4.7, Bind 32:9.8.2-0.37.rc1.42.amzn1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS (30-day exploit likelihood)
55%
Higher than 99.0% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2015-8000 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
Affected Products
391 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| BindIsc | 8.4.7, 9.0, 9.0.1, 9.1, 9.10.0, 9.10.1, 9.10.1-p1, 9.10.2-b1 | 32:9.8.2-0.37.rc1.42.amzn1 |
| LinuxOracle | 5.0, 6, 7 | n/a |
| SolarisOracle | 10, 11.3 | n/a |
| Vm ServerOracle | 3.2 | n/a |
| bind9debian | See advisory | 1:9.9.5.dfsg-12.1 |
Patched Releases
Bind
30:9.3.6-25.P1.el5_11.5, 32:9.8.2-0.17.rc1.el6_4.7, 32:9.8.2-0.37.rc1.42.amzn1, 32:9.8.2-0.37.rc1.el6_7.5, 32:9.9.4-29.el7_2.1, 9.10.3P4-21.1, 9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-chroot
30:9.3.6-25.P1.el5_11.5, 32:9.8.2-0.37.rc1.42.amzn1, 32:9.8.2-0.37.rc1.el6_7.5, 32:9.9.4-29.el7_2.1
bind-chrootenv
9.10.3P4-21.1, 9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-debuginfo
9.9.4P2-72.1
bind-debugsource
9.9.4P2-72.1
bind-devel
30:9.3.6-25.P1.el5_11.5, 32:9.8.2-0.37.rc1.42.amzn1, 32:9.8.2-0.37.rc1.el6_7.5, 32:9.9.4-29.el7_2.1, 9.10.3P4-21.1, 9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-devel-32bit
9.10.3P4-21.1, 9.9.6P1-0.19.1
bind-doc
9.10.3P4-21.1, 9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-libbind-devel
30:9.3.6-25.P1.el5_11.5
bind-libs
30:9.3.6-25.P1.el5_11.5, 32:9.8.2-0.37.rc1.42.amzn1, 32:9.8.2-0.37.rc1.el6_7.5, 32:9.9.4-29.el7_2.1, 9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-libs-32bit
9.9.4P2-72.1, 9.9.6P1-0.19.1, 9.9.6P1-27.1, 9.9.6P1-28.6.1, 9.9.6P1-32.1
bind-libs-debuginfo
9.9.4P2-72.1
bind-libs-debuginfo-32bit
9.9.4P2-72.1
bind-libs-debuginfo-x86
9.9.4P2-72.1
bind-libs-lite
32:9.9.4-29.el7_2.1
bind-libs-x86
9.9.4P2-72.1, 9.9.6P1-0.19.1
bind-license
32:9.9.4-29.el7_2.1
bind-lite-devel
32:9.9.4-29.el7_2.1
bind-lwresd
9.10.3P4-21.1, 9.9.4P2-72.1, 9.9.6P1-27.1
bind-lwresd-debuginfo
9.9.4P2-72.1
bind-pkcs11
32:9.9.4-29.el7_2.1
bind-pkcs11-devel
32:9.9.4-29.el7_2.1
bind-pkcs11-libs
32:9.9.4-29.el7_2.1
bind-pkcs11-utils
32:9.9.4-29.el7_2.1
bind-sdb
30:9.3.6-25.P1.el5_11.5, 32:9.8.2-0.37.rc1.42.amzn1, 32:9.8.2-0.37.rc1.el6_7.5, 32:9.9.4-29.el7_2.1
Timeline
Publicly disclosed
Dec 16, 2015
Last updated
Aug 4, 2026
Weakness Type
- CWE-20 Improper Input Validation
References
- advisoryHPSBUX03552
- advisoryRHSA-2015:2655
- advisoryRHSA-2015:2656
- advisoryRHSA-2015:2658
- advisoryRHSA-2016:0078
FAQ
Common Questions.
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
Affected: Bind (Isc) versions 8.4.7, 9.0, 9.0.1, 9.1, 9.10.0, 9.10.1, 9.10.1-p1, 9.10.2-b1; Linux (Oracle) versions 5.0, 6, 7; Solaris (Oracle) versions 10, 11.3, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Bind 30:9.3.6-25.P1.el5_11.5, Bind 32:9.8.2-0.17.rc1.el6_4.7, Bind 32:9.8.2-0.37.rc1.42.amzn1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2015-8000 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo