NVD

Id
35527  
Name
CVE-2014-8500  
Description
ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-12-10  
Modified Date
2017-01-02  
Seq
2014-8500  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181935 35527 CVE-2014-8500 http://advisories.mageia.org/MGASA-2014-0524.html  View
181936 35527 CVE-2014-8500 http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html  View
181937 35527 CVE-2014-8500 NetBSD-SA2015-002  View
181938 35527 CVE-2014-8500 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10676  View
181939 35527 CVE-2014-8500 APPLE-SA-2015-09-16-4  View
181940 35527 CVE-2014-8500 SUSE-SU-2015:0011  View
181941 35527 CVE-2014-8500 SUSE-SU-2015:0096  View
181942 35527 CVE-2014-8500 SUSE-SU-2015:0480  View
181943 35527 CVE-2014-8500 SUSE-SU-2015:0488  View
181944 35527 CVE-2014-8500 openSUSE-SU-2015:1250  View
181945 35527 CVE-2014-8500 SSRT101750  View
181946 35527 CVE-2014-8500 SSRT102211  View
181947 35527 CVE-2014-8500 RHSA-2016:0078  View
181948 35527 CVE-2014-8500 62064  View
181949 35527 CVE-2014-8500 62122  View
181950 35527 CVE-2014-8500 GLSA-201502-03  View
181951 35527 CVE-2014-8500 1031311  View
181952 35527 CVE-2014-8500 USN-2437-1  View
181953 35527 CVE-2014-8500 DSA-3094  View
181954 35527 CVE-2014-8500 VU#264212  View
181955 35527 CVE-2014-8500 MDVSA-2015:165  View
181956 35527 CVE-2014-8500 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
181957 35527 CVE-2014-8500 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
181958 35527 CVE-2014-8500 71590  View
181959 35527 CVE-2014-8500 https://kb.isc.org/article/AA-01216/  View
181960 35527 CVE-2014-8500 https://support.apple.com/HT205219  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17069 JVNDB-2014-005944 ISC BIND におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND は、委譲チェーン (delegation chaining) を制限しないため、サービス運用妨害 (メモリ消費および named のクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-8500 75793 CVE-2014-8500 35527 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005944.html 2014-12-08 2015-10-27 View