The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.
References
Link | Resource |
---|---|
http://security.gentoo.org/glsa/glsa-201502-03.xml | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1030214 | Third Party Advisory VDB Entry |
https://kb.isc.org/article/AA-01161 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2014-05-09 01:55
Updated : 2024-02-04 18:35
NVD link : CVE-2014-3214
Mitre link : CVE-2014-3214
CVE.ORG link : CVE-2014-3214
JSON object : View
Products Affected
isc
- bind
CWE
CWE-20
Improper Input Validation