CVE-2014-8602

Unbound < 1.5.1 - Denial of Service via Delegation Chaining

Title source: llm
STIX 2.1

Description

iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71589
Third Party Advisory x_refsource_misc
http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3097
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/264212
Patch, Vendor Advisory x_refsource_confirm
https://unbound.net/downloads/CVE-2014-8602.txt
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2484-1

Scores

EPSS 0.2520
EPSS Percentile 97.7%

Details

CWE
CWE-399
Status published
Products (4)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
debian/debian_linux 7.0
nlnetlabs/unbound < 1.5.0
Published Dec 11, 2014
Tracked Since Feb 18, 2026