CVE-2014-0591
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 33%
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.htmlhttp://linux.oracle.com/errata/ELSA-2014-1244http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.htmlhttp://lists.opensuse.org/opensuse-updates/2014-02/msg00016.htmlhttp://lists.opensuse.org/opensuse-updates/2014-02/msg00019.htmlhttp://marc.info/?l=bugtraq&m=138995561732658&w=2http://osvdb.org/101973http://rhn.redhat.com/errata/RHSA-2014-0043.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1051717http://secunia.com/advisories/56425