CVE-2014-8500

CVE-2014-8500

Published · Updated

Follow this CVE+ Monitor bind9

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 59%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
23 products (936 components)
Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Desktop Workstation (v. 5 client) · Red Hat Enterprise Linux Desktop (v. 5 client) · Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · and others 18
fix ↗
ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
Affected products
n/a · n/a