CVE-2015-1349: ISC BIND

Medium severity, CVSS 5.4. EPSS: 22.2% chance of exploitation in the next 30 days.

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

Affected products

• ISC BIND: version 9.7.0 only; version 9.7.1 only; version 9.7.2 only; version 9.7.3 only; version 9.7.4 only; version 9.7.5 only; …

Published 2015-02-19. Last modified 2026-06-17.