CVE-2014-3214

ISC BIND 9.10.0 - Denial of Service via Prefetch DNS Query Handling

Title source: llm
STIX 2.1

Description

The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201502-03.xml
Vendor Advisory x_refsource_confirm
https://kb.isc.org/article/AA-01161
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030214

Scores

EPSS 0.1126
EPSS Percentile 93.6%

Details

CWE
CWE-20
Status published
Products (1)
isc/bind 9.10.0
Published May 09, 2014
Tracked Since Feb 18, 2026