2.6

CVE-2014-0591

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version 9.6
Isc ≫ Bind Version 9.6 Update r5_p1
Isc ≫ Bind Version 9.6 Update r6_b1
Isc ≫ Bind Version 9.6 Update r6_rc1
Isc ≫ Bind Version 9.6 Update r6_rc2
Isc ≫ Bind Version 9.6 Update r7_p1
Isc ≫ Bind Version 9.6 Update r7_p2
Isc ≫ Bind Version 9.6 Update r9_p1
Isc ≫ Bind Version 9.6.0
Isc ≫ Bind Version 9.6.0 Update p1
Isc ≫ Bind Version 9.6.0 Update rc1
Isc ≫ Bind Version 9.6.0 Update rc2
Isc ≫ Bind Version 9.6.1
Isc ≫ Bind Version 9.6.1 Update p1
Isc ≫ Bind Version 9.6.1 Update p2
Isc ≫ Bind Version 9.6.1 Update p3
Isc ≫ Bind Version 9.6.1 Update rc1
Isc ≫ Bind Version 9.6.2
Isc ≫ Bind Version 9.6.2 Update rc1
Isc ≫ Bind Version 9.6.3
Isc ≫ Bind Version 9.6.3 Update rc1
Isc ≫ Bind Version 9.7.0
Isc ≫ Bind Version 9.7.0 Update b1
Isc ≫ Bind Version 9.7.0 Update p1
Isc ≫ Bind Version 9.7.0 Update p2
Isc ≫ Bind Version 9.7.0 Update rc1
Isc ≫ Bind Version 9.7.0 Update rc2
Isc ≫ Bind Version 9.7.1
Isc ≫ Bind Version 9.7.1 Update p1
Isc ≫ Bind Version 9.7.1 Update p2
Isc ≫ Bind Version 9.7.1 Update rc1
Isc ≫ Bind Version 9.7.2
Isc ≫ Bind Version 9.7.2 Update p1
Isc ≫ Bind Version 9.7.2 Update p2
Isc ≫ Bind Version 9.7.2 Update p3
Isc ≫ Bind Version 9.7.2 Update rc1
Isc ≫ Bind Version 9.7.3
Isc ≫ Bind Version 9.7.3 Update b1
Isc ≫ Bind Version 9.7.3 Update p1
Isc ≫ Bind Version 9.7.3 Update rc1
Isc ≫ Bind Version 9.7.4
Isc ≫ Bind Version 9.7.4 Update b1
Isc ≫ Bind Version 9.7.4 Update p1
Isc ≫ Bind Version 9.7.4 Update rc1
Isc ≫ Bind Version 9.7.5
Isc ≫ Bind Version 9.7.5 Update b1
Isc ≫ Bind Version 9.7.5 Update rc1
Isc ≫ Bind Version 9.7.5 Update rc2
Isc ≫ Bind Version 9.7.6
Isc ≫ Bind Version 9.7.6 Update p1
Isc ≫ Bind Version 9.7.6 Update p2
Isc ≫ Bind Version 9.7.7
Isc ≫ Bind Version 9.8.0
Isc ≫ Bind Version 9.8.0 Update a1
Isc ≫ Bind Version 9.8.0 Update b1
Isc ≫ Bind Version 9.8.0 Update p1
Isc ≫ Bind Version 9.8.0 Update p2
Isc ≫ Bind Version 9.8.0 Update p4
Isc ≫ Bind Version 9.8.0 Update rc1
Isc ≫ Bind Version 9.8.1
Isc ≫ Bind Version 9.8.1 Update b1
Isc ≫ Bind Version 9.8.1 Update b2
Isc ≫ Bind Version 9.8.1 Update b3
Isc ≫ Bind Version 9.8.1 Update p1
Isc ≫ Bind Version 9.8.1 Update rc1
Isc ≫ Bind Version 9.8.2 Update b1
Isc ≫ Bind Version 9.8.2 Update rc1
Isc ≫ Bind Version 9.8.2 Update rc2
Isc ≫ Bind Version 9.8.3
Isc ≫ Bind Version 9.8.3 Update p1
Isc ≫ Bind Version 9.8.3 Update p2
Isc ≫ Bind Version 9.8.4
Isc ≫ Bind Version 9.8.5
Isc ≫ Bind Version 9.8.5 Update b1
Isc ≫ Bind Version 9.8.5 Update b2
Isc ≫ Bind Version 9.8.5 Update p1
Isc ≫ Bind Version 9.8.5 Update p2
Isc ≫ Bind Version 9.8.5 Update rc1
Isc ≫ Bind Version 9.8.5 Update rc2
Isc ≫ Bind Version 9.8.6
Isc ≫ Bind Version 9.8.6 Update b1
Isc ≫ Bind Version 9.8.6 Update p1
Isc ≫ Bind Version 9.8.6 Update rc1
Isc ≫ Bind Version 9.8.6 Update rc2
Isc ≫ Bind Version 9.9.4
Isc ≫ Bind Version 9.9.4 Update p1
Isc ≫ Bind Version 9.9.4 Update rc1
Isc ≫ Bind Version 9.9.4 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 31.67% 0.981
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://linux.oracle.com/errata/ELSA-2014-1244
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
https://support.apple.com/kb/HT6536
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html
http://marc.info/?l=bugtraq&m=138995561732658&w=2
http://osvdb.org/101973
http://rhn.redhat.com/errata/RHSA-2014-0043.html
http://secunia.com/advisories/56425
http://secunia.com/advisories/56427
http://secunia.com/advisories/56442
http://secunia.com/advisories/56493
http://secunia.com/advisories/56522
http://secunia.com/advisories/56574
http://secunia.com/advisories/56871
http://secunia.com/advisories/61117
http://secunia.com/advisories/61199
http://secunia.com/advisories/61343
http://www.debian.org/security/2014/dsa-3023
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc
http://www.mandriva.com/security/advisories?name=MDVSA-2014:002
http://www.securityfocus.com/bid/64801
http://www.securitytracker.com/id/1029589
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465
http://www.ubuntu.com/usn/USN-2081-1
https://bugzilla.redhat.com/show_bug.cgi?id=1051717
https://kb.isc.org/article/AA-01078
Vendor Advisory
https://kb.isc.org/article/AA-01085
Vendor Advisory