Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2014-0591
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature..
CVSSv2.0 Score
- Severity
- Low
- Base Score
- 2.6/10
- Exploit Score
- 4.9/10
- Access Vector
- Network
- Access Complexity
- High
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- Partial
- Integrity Impact
- None
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:isc:bind:9.9.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.6:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.1:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.5:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.1:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.2:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.2:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.6:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.1:p3:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.4:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.7:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.9.4:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.5:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.2:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.5:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.1:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.1:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.6:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.6:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.2:p3:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.4:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.3:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:b2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.3:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.5:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.6:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.3:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.9.4:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.3:b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.6:p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.4:p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.7.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.9.4:rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:*:*:*:* |
Yes
|
- | - |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1051717
- https://kb.isc.org/article/AA-01085
- https://kb.isc.org/article/AA-01078
- http://secunia.com/advisories/56442
- http://osvdb.org/101973
- http://secunia.com/advisories/56425
- http://www.securitytracker.com/id/1029589
- http://secunia.com/advisories/56427
- http://www.ubuntu.com/usn/USN-2081-1
- http://marc.info/?l=bugtraq&m=138995561732658&w=2
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html
- http://www.securityfocus.com/bid/64801
- http://secunia.com/advisories/56493
- http://secunia.com/advisories/56574
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:002
- http://secunia.com/advisories/56522
- http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html
- http://rhn.redhat.com/errata/RHSA-2014-0043.html
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-sec
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-sec
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
- https://support.apple.com/kb/HT6536
- http://www.debian.org/security/2014/dsa-3023
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
- http://secunia.com/advisories/61343
- http://secunia.com/advisories/61199
- http://secunia.com/advisories/61117
- http://linux.oracle.com/errata/ELSA-2014-1244
- http://secunia.com/advisories/56871