Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-edmz-dknk-9fdt

Summary Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.

Aliases

alias	CVE-2015-8461

Fixed_packages

url	pkg:deb/debian/bind9@0?distro=trixie
purl	pkg:deb/debian/bind9@0?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bind9@0%3Fdistro=trixie

url pkg:deb/debian/bind9@1:9.16.50-1~deb11u2?distro=trixie

purl pkg:deb/debian/bind9@1:9.16.50-1~deb11u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-acdz-uq4x-mucc

vulnerability	VCID-ekn5-nayb-uufj

vulnerability	VCID-qu9b-7ejp-jyaa

vulnerability	VCID-ykwn-e6sw-eueh

vulnerability	VCID-zfyv-k8nv-zubd

vulnerability	VCID-zruv-x4yk-dqch

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bind9@1:9.16.50-1~deb11u2%3Fdistro=trixie

url pkg:deb/debian/bind9@1:9.18.47-1~deb12u1?distro=trixie

purl pkg:deb/debian/bind9@1:9.18.47-1~deb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-qu9b-7ejp-jyaa

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bind9@1:9.18.47-1~deb12u1%3Fdistro=trixie

url	pkg:deb/debian/bind9@1:9.20.21-1~deb13u1?distro=trixie
purl	pkg:deb/debian/bind9@1:9.20.21-1~deb13u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bind9@1:9.20.21-1~deb13u1%3Fdistro=trixie

url	pkg:deb/debian/bind9@1:9.20.23-1?distro=trixie
purl	pkg:deb/debian/bind9@1:9.20.23-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bind9@1:9.20.23-1%3Fdistro=trixie

Affected_packages

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8461.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8461.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2015-8461

reference_id

reference_type

scores

value	0.15997
scoring_system	epss
scoring_elements	0.94891
published_at	2026-06-04T12:55:00Z

value	0.15997
scoring_system	epss
scoring_elements	0.949
published_at	2026-06-06T12:55:00Z

value	0.15997
scoring_system	epss
scoring_elements	0.94901
published_at	2026-06-08T12:55:00Z

value	0.15997
scoring_system	epss
scoring_elements	0.94906
published_at	2026-06-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2015-8461

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1291186
reference_id	1291186
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1291186

Weaknesses

cwe_id	362
name	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
description	The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-edmz-dknk-9fdt

Vulnerability Instance