PT-2014-8680 · Isc+1 · Bind+1

Publicado 2014-12-11 · Atualizado 2024-06-15 · CVE-2014-8680

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.10.0 through 9.10.1

Description The issue is related to the GeoIP functionality, which allows remote attackers to cause a denial of service. This can happen in two scenarios: (1) when there are no GeoIP databases available for both IPv4 and IPv6, or (2) when IPv6 support is enabled with certain options, leading to an assertion failure and the named service exiting.

Recommendations For ISC BIND versions 9.10.0 through 9.10.1, consider disabling the GeoIP functionality as a temporary workaround until a patch is available. Restrict access to the affected service to minimize the risk of exploitation.

Correção

DoS

RCE

Improper Access Control

Enumeração de Fraquezas

CWE-20

CWE-284

Identificadores relacionados

CVE-2014-8680

OPENSUSE-SU-2024:10467-1

Produtos afetados

Bind

Bind Server

Referências · 42

• https://suse.com/security/cve/CVE-2015-1349 · Nota
• https://suse.com/security/cve/CVE-2011-1910 · Nota
• https://suse.com/security/cve/CVE-2012-1667 · Nota
• https://suse.com/security/cve/CVE-2009-4022 · Nota
• https://suse.com/security/cve/CVE-2012-5688 · Nota
• https://suse.com/security/cve/CVE-2013-4854 · Nota
• https://suse.com/security/cve/CVE-2015-8705 · Nota
• https://suse.com/security/cve/CVE-2010-3614 · Nota
• https://suse.com/security/cve/CVE-2016-8864 · Nota
• https://suse.com/security/cve/CVE-2014-8680 · Nota
• https://suse.com/security/cve/CVE-2015-8000 · Nota
• https://suse.com/security/cve/CVE-2012-4244 · Nota
• https://suse.com/security/cve/CVE-2012-5166 · Nota
• https://suse.com/security/cve/CVE-2011-0414 · Nota
• https://suse.com/security/cve/CVE-2012-3817 · Nota