CVE-2014-8680

ISC BIND 9.10.0-9.10.1 - Denial of Service via GeoIP Database Handling

Title source: llm
STIX 2.1

Description

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.

References (3)

Core 3
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201502-03.xml
Vendor Advisory x_refsource_confirm
https://kb.isc.org/article/AA-01217
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190730-0002/

Scores

EPSS 0.0226
EPSS Percentile 84.8%

Details

CWE
CWE-20 CWE-284
Status published
Products (2)
isc/bind 9.10.0
isc/bind 9.10.1
Published Dec 11, 2014
Tracked Since Feb 18, 2026