System	Score	Found at
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
epss	0.0008	https://api.first.org/data/v1/epss?cve=CVE-2015-8899
cvssv2	4.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2	5.0	https://nvd.nist.gov/vuln/detail/CVE-2015-8899
cvssv3	7.5	https://nvd.nist.gov/vuln/detail/CVE-2015-8899

Reference id	Reference type	URL
		http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010479.html
		http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010505.html
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8899.json
		https://api.first.org/data/v1/epss?cve=CVE-2015-8899
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8899
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
		http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=41a8d9e99be9f2cc8b02051dd322cb45e0faac87
		http://www.openwall.com/lists/oss-security/2016/06/03/7
		http://www.openwall.com/lists/oss-security/2016/06/04/2
		http://www.securityfocus.com/bid/91031
		http://www.securitytracker.com/id/1036045
		http://www.ubuntu.com/usn/USN-3009-1
1343072		https://bugzilla.redhat.com/show_bug.cgi?id=1343072
cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
CVE-2015-8899		https://nvd.nist.gov/vuln/detail/CVE-2015-8899
USN-3009-1		https://usn.ubuntu.com/3009-1/

No exploits are available.

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2015-8899

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2015-8899

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.23716
EPSS Score	0.0008
Published At	April 1, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-01T14:38:49.269153+00:00	RedHat Importer	Import	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8899.json	38.0.0