NVD

Id
29481  
Name
CVE-2014-0591  
Description
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-01-13  
Modified Date
2017-01-06  
Seq
2014-0591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156347 29481 CVE-2014-0591 APPLE-SA-2014-10-16-3  View
156348 29481 CVE-2014-0591 http://linux.oracle.com/errata/ELSA-2014-1244  View
156349 29481 CVE-2014-0591 FEDORA-2014-0858  View
156350 29481 CVE-2014-0591 FEDORA-2014-0811  View
156351 29481 CVE-2014-0591 SUSE-SU-2015:0480  View
156352 29481 CVE-2014-0591 openSUSE-SU-2014:0199  View
156353 29481 CVE-2014-0591 openSUSE-SU-2014:0202  View
156354 29481 CVE-2014-0591 HPSBUX02961  View
156355 29481 CVE-2014-0591 RHSA-2014:0043  View
156356 29481 CVE-2014-0591 61117  View
156357 29481 CVE-2014-0591 61199  View
156358 29481 CVE-2014-0591 61343  View
156359 29481 CVE-2014-0591 DSA-3023  View
156360 29481 CVE-2014-0591 FreeBSD-SA-14:04  View
156361 29481 CVE-2014-0591 MDVSA-2014:002  View
156362 29481 CVE-2014-0591 64801  View
156363 29481 CVE-2014-0591 1029589  View
156364 29481 CVE-2014-0591 SSA:2014-175-01  View
156365 29481 CVE-2014-0591 SSA:2014-028-01  View
156366 29481 CVE-2014-0591 USN-2081-1  View
156367 29481 CVE-2014-0591 https://bugzilla.redhat.com/show_bug.cgi?id=1051717  View
156368 29481 CVE-2014-0591 https://kb.isc.org/article/AA-01078  View
156369 29481 CVE-2014-0591 https://kb.isc.org/article/AA-01085  View
156370 29481 CVE-2014-0591 https://support.apple.com/kb/HT6536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12193 JVNDB-2014-001068 ISC BIND の named の query.c 内の query_findclosestnsec3 関数におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND の named の query.c 内の query_findclosestnsec3 関数には、サービス運用妨害 (INSIST 表明違反およびデーモンの終了) 状態にされる脆弱性が存在します。 CVE-2014-0591 67992 CVE-2014-0591 29481 2.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001068.html 2014-01-13 2014-11-05 View