The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.
References
Link | Resource |
---|---|
https://kb.isc.org/article/AA-01161 | Vendor Advisory |
http://www.securitytracker.com/id/1030214 | Third Party Advisory VDB Entry |
http://security.gentoo.org/glsa/glsa-201502-03.xml | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2014-05-08 18:55
Updated : 2016-09-06 06:32
NVD link : CVE-2014-3214
Mitre link : CVE-2014-3214
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
isc
- bind