2.6

CVE-2014-0591

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version9.6
Isc ≫ Bind Version9.6 Updater5_p1
Isc ≫ Bind Version9.6 Updater6_b1
Isc ≫ Bind Version9.6 Updater6_rc1
Isc ≫ Bind Version9.6 Updater6_rc2
Isc ≫ Bind Version9.6 Updater7_p1
Isc ≫ Bind Version9.6 Updater7_p2
Isc ≫ Bind Version9.6 Updater9_p1
Isc ≫ Bind Version9.6.0
Isc ≫ Bind Version9.6.0 Updatep1
Isc ≫ Bind Version9.6.0 Updaterc1
Isc ≫ Bind Version9.6.0 Updaterc2
Isc ≫ Bind Version9.6.1
Isc ≫ Bind Version9.6.1 Updatep1
Isc ≫ Bind Version9.6.1 Updatep2
Isc ≫ Bind Version9.6.1 Updatep3
Isc ≫ Bind Version9.6.1 Updaterc1
Isc ≫ Bind Version9.6.2
Isc ≫ Bind Version9.6.2 Updaterc1
Isc ≫ Bind Version9.6.3
Isc ≫ Bind Version9.6.3 Updaterc1
Isc ≫ Bind Version9.7.0
Isc ≫ Bind Version9.7.0 Updateb1
Isc ≫ Bind Version9.7.0 Updatep1
Isc ≫ Bind Version9.7.0 Updatep2
Isc ≫ Bind Version9.7.0 Updaterc1
Isc ≫ Bind Version9.7.0 Updaterc2
Isc ≫ Bind Version9.7.1
Isc ≫ Bind Version9.7.1 Updatep1
Isc ≫ Bind Version9.7.1 Updatep2
Isc ≫ Bind Version9.7.1 Updaterc1
Isc ≫ Bind Version9.7.2
Isc ≫ Bind Version9.7.2 Updatep1
Isc ≫ Bind Version9.7.2 Updatep2
Isc ≫ Bind Version9.7.2 Updatep3
Isc ≫ Bind Version9.7.2 Updaterc1
Isc ≫ Bind Version9.7.3
Isc ≫ Bind Version9.7.3 Updateb1
Isc ≫ Bind Version9.7.3 Updatep1
Isc ≫ Bind Version9.7.3 Updaterc1
Isc ≫ Bind Version9.7.4
Isc ≫ Bind Version9.7.4 Updateb1
Isc ≫ Bind Version9.7.4 Updatep1
Isc ≫ Bind Version9.7.4 Updaterc1
Isc ≫ Bind Version9.7.5
Isc ≫ Bind Version9.7.5 Updateb1
Isc ≫ Bind Version9.7.5 Updaterc1
Isc ≫ Bind Version9.7.5 Updaterc2
Isc ≫ Bind Version9.7.6
Isc ≫ Bind Version9.7.6 Updatep1
Isc ≫ Bind Version9.7.6 Updatep2
Isc ≫ Bind Version9.7.7
Isc ≫ Bind Version9.8.0
Isc ≫ Bind Version9.8.0 Updatea1
Isc ≫ Bind Version9.8.0 Updateb1
Isc ≫ Bind Version9.8.0 Updatep1
Isc ≫ Bind Version9.8.0 Updatep2
Isc ≫ Bind Version9.8.0 Updatep4
Isc ≫ Bind Version9.8.0 Updaterc1
Isc ≫ Bind Version9.8.1
Isc ≫ Bind Version9.8.1 Updateb1
Isc ≫ Bind Version9.8.1 Updateb2
Isc ≫ Bind Version9.8.1 Updateb3
Isc ≫ Bind Version9.8.1 Updatep1
Isc ≫ Bind Version9.8.1 Updaterc1
Isc ≫ Bind Version9.8.2 Updateb1
Isc ≫ Bind Version9.8.2 Updaterc1
Isc ≫ Bind Version9.8.2 Updaterc2
Isc ≫ Bind Version9.8.3
Isc ≫ Bind Version9.8.3 Updatep1
Isc ≫ Bind Version9.8.3 Updatep2
Isc ≫ Bind Version9.8.4
Isc ≫ Bind Version9.8.5
Isc ≫ Bind Version9.8.5 Updateb1
Isc ≫ Bind Version9.8.5 Updateb2
Isc ≫ Bind Version9.8.5 Updatep1
Isc ≫ Bind Version9.8.5 Updatep2
Isc ≫ Bind Version9.8.5 Updaterc1
Isc ≫ Bind Version9.8.5 Updaterc2
Isc ≫ Bind Version9.8.6
Isc ≫ Bind Version9.8.6 Updateb1
Isc ≫ Bind Version9.8.6 Updatep1
Isc ≫ Bind Version9.8.6 Updaterc1
Isc ≫ Bind Version9.8.6 Updaterc2
Isc ≫ Bind Version9.9.4
Isc ≫ Bind Version9.9.4 Updatep1
Isc ≫ Bind Version9.9.4 Updaterc1
Isc ≫ Bind Version9.9.4 Updaterc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 31.67% 0.981
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://linux.oracle.com/errata/ELSA-2014-1244
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
https://support.apple.com/kb/HT6536
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html
http://marc.info/?l=bugtraq&m=138995561732658&w=2
http://osvdb.org/101973
http://rhn.redhat.com/errata/RHSA-2014-0043.html
http://secunia.com/advisories/56425
http://secunia.com/advisories/56427
http://secunia.com/advisories/56442
http://secunia.com/advisories/56493
http://secunia.com/advisories/56522
http://secunia.com/advisories/56574
http://secunia.com/advisories/56871
http://secunia.com/advisories/61117
http://secunia.com/advisories/61199
http://secunia.com/advisories/61343
http://www.debian.org/security/2014/dsa-3023
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc
http://www.mandriva.com/security/advisories?name=MDVSA-2014:002
http://www.securityfocus.com/bid/64801
http://www.securitytracker.com/id/1029589
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465
http://www.ubuntu.com/usn/USN-2081-1
https://bugzilla.redhat.com/show_bug.cgi?id=1051717
https://kb.isc.org/article/AA-01078
Vendor Advisory
https://kb.isc.org/article/AA-01085
Vendor Advisory