CVE-2014-8500

ISC BIND 9.0.x-9.8.x 9.9.0-9.9.6 9.10.0-9.10.1 - Denial of Service via Unlimited Delegation Chaining

Title source: llm
STIX 2.1

Description

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

References (27)

Core 27
Core References
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=142180687100892&w=2
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201502-03.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62122
Vendor Advisory vendor-advisory x_refsource_netbsd
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-002.txt.asc
Vendor Advisory x_refsource_confirm
https://kb.isc.org/article/AA-01216/
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:165
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62064
Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3094
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1031311
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0524.html
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/264212
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71590
Patch, Vendor Advisory vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-2437-1
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=144000632319155&w=2
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT205219
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190730-0002/
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-0078.html

Scores

EPSS 0.4822
EPSS Percentile 97.8%

Details

CWE
CWE-399
Status published
Products (50)
isc/bind 9.0
isc/bind 9.0.1
isc/bind 9.1
isc/bind 9.1.1
isc/bind 9.1.2
isc/bind 9.1.3
isc/bind 9.2
isc/bind 9.2.0
isc/bind 9.2.1
isc/bind 9.2.2
... and 40 more
Published Dec 11, 2014
Tracked Since Feb 18, 2026