Servers and applications
CVE-2015-8704 apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
Severity Medium 6.5
Published 20 Jan 2016
Last changed 17 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 21% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST , 11 Nov 2026
Attack Over the network · Needs a user account · No user action needed
Attacker can Take it down
CVSS vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Sources NVD Affected software Software Affected versions BIND 9Servers and applications · cpe:a:isc:bind Version 9.10.3-p2 Version 9.10.3-p1 Version 9.10.3 Version 9.10.3-rc1 All 55 release lines Version 9.0 Version 9.0.1 Version 9.1 Version 9.1.1 Version 9.1.2 Version 9.1.3 Version 9.2 Version 9.2.1 Version 9.2.2 Version 9.2.2-p3 Version 9.2.3 Version 9.2.4 Version 9.2.5 Version 9.2.6 Version 9.2.7 Version 9.3 Version 9.3.1 Version 9.3.2 Version 9.3.3 Version 9.4.0-rc1 Version 9.4 Version 9.4.1 Version 9.4.2 Version 9.4.3-rc1 Version 9.4.3 Version 9.5.0-rc1 Version 9.5 Version 9.5.1-rc1 Version 9.5.1-rc2 Version 9.5.1 Version 9.5.2-rc1 Version 9.5.2 Version 9.5.3-rc1 Version 9.5.3 Version 9.6-r6_b1 Version 9.6-r6_rc1 Version 9.6-r6_rc2 Version 9.6 Version 9.6-r5_p1 Version 9.6-r7_p1 Version 9.6-r7_p2 Version 9.9.8-p2 Version 9.10.1 Version 9.10.1-p1 Version 9.10.2-b1 Version 9.10.2-rc1 Version 9.10.2 Version 9.10.2-p1 Version 9.10.2-p2 Version 9.10.2-p3 Version 9.10.2-p4 Version 9.10.3-rc1 Version 9.10.3 Version 9.10.3-p1 Version 9.10.3-p2
References NVD https://nvd.nist.gov/vuln/detail/CVE-2015-8704 CVE.org https://www.cve.org/CVERecord?id=CVE-2015-8704