CVE-2014-8500

Published: Dec 11, 2014Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

Affected (63)

Products: Isc: Bind

1 product

Configuration A

63 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.3
Isc Bind	Version 9.10.0
Isc Bind	Version 9.10.1
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2.8
Isc Bind	Version 9.2.9
Isc Bind	Version 9.2
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.3
Isc Bind	Version 9.3.4
Isc Bind	Version 9.3.5
Isc Bind	Version 9.3.6
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.1
Isc Bind	Version 9.5.2
Isc Bind	Version 9.5.3
Isc Bind	Version 9.5
Isc Bind	Version 9.6.0
Isc Bind	Version 9.6.1
Isc Bind	Version 9.6.2
Isc Bind	Version 9.6.3
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.3
Isc Bind	Version 9.7.4
Isc Bind	Version 9.7.5
Isc Bind	Version 9.7.6
Isc Bind	Version 9.7.7
Isc Bind	Version 9.8.0
Isc Bind	Version 9.8.1
Isc Bind	Version 9.8.2
Isc Bind	Version 9.8.3
Isc Bind	Version 9.8.4
Isc Bind	Version 9.8.5
Isc Bind	Version 9.8.6
Isc Bind	Version 9.9.0
Isc Bind	Version 9.9.1
Isc Bind	Version 9.9.2
Isc Bind	Version 9.9.3
Isc Bind	Version 9.9.4
Isc Bind	Version 9.9.5
Isc Bind	Version 9.9.6

Related CWEs

References (54)

http://advisories.mageia.org/MGASA-2014-0524.html

Source: cve@mitre.org

http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html

Source: cve@mitre.org

Vendor Advisory

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-002.txt.asc

Source: cve@mitre.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10676

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=142180687100892&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=144000632319155&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0078.html

Source: cve@mitre.org

http://secunia.com/advisories/62064

Source: cve@mitre.org

http://secunia.com/advisories/62122

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201502-03.xml

Source: cve@mitre.org

http://securitytracker.com/id?1031311

Source: cve@mitre.org

http://ubuntu.com/usn/usn-2437-1

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2014/dsa-3094

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/264212

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2015:165

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/71590

Source: cve@mitre.org

https://kb.isc.org/article/AA-01216/

Source: cve@mitre.org

Vendor Advisory

https://security.netapp.com/advisory/ntap-20190730-0002/

Source: cve@mitre.org

https://support.apple.com/HT205219

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0524.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-002.txt.asc

Source: af854a3a-2127-422b-91ae-364da2661108

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10676

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=142180687100892&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=144000632319155&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0078.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62064

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62122

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201502-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1031311

Source: af854a3a-2127-422b-91ae-364da2661108

http://ubuntu.com/usn/usn-2437-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2014/dsa-3094

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.kb.cert.org/vuls/id/264212

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2015:165

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/71590

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.isc.org/article/AA-01216/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.netapp.com/advisory/ntap-20190730-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT205219

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.