Lucene search
F5F5:K15927HistorySep 16, 2015 - 12:00 a.m.
K15927 : BIND vulnerability CVE-2014-8500
2015-09-1600:00:00
my.f5.com
29
Security Advisory Description
ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. (CVE-2014-8500)
Impact
This behavior may lead to resource exhaustion and denial-of-service (up to and including termination of the namedserver process.) All recursive resolvers are affected. Authoritative servers may be affected if an attacker can control a delegation traversed by the authoritative server in servicing the zone.
Important: Recursion is not enabled by default for BIG-IP modules.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.3.0 | |
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 12.0.0 | |
| big-ip analytics | eq | 11.0.0 |
Related
archlinux
archlinux
bind: denial of service
2014-12-08 00:00:00
nessus
nessus
AIX 7.1 TL 3 : bind9 (IV68996)
2015-02-25 00:00:00
Fedora 20 : bind-9.9.4-17.P2.fc20 (2014-16607)
2014-12-18 00:00:00
CentOS 5 / 6 / 7 : bind (CESA-2014:1984)
2014-12-15 00:00:00
openvas
openvas
SUSE: Security Advisory for bind (SUSE-SU-2015:0011-1)
2015-10-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0011-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0488-1)
2021-06-09 00:00:00
osv
osv
bind9 - security update
2014-12-15 00:00:00
bind9 - security update
2014-12-08 00:00:00
suse
suse
Security update for bind (important)
2015-03-12 23:04:54
Security update for bind (important)
2015-02-16 19:04:59
Security update for bind (important)
2015-01-21 11:04:45
debian
debian
[SECURITY] [DSA 3094-1] bind9 security update
2014-12-08 21:42:44
[SECURITY] [DSA 3094-1] bind9 security update
2014-12-08 21:42:44
[SECURITY] [DLA 112-1] bind9 security update
2014-12-15 18:43:58
cvelist
cvelist
CVE-2014-8500
2014-12-11 02:00:00
f5
f5
SOL15927 - BIND vulnerability CVE-2014-8500
2014-12-19 00:00:00
aix
aix
Vulnerability in AIX bind,Vulnerability in VIOS bind
2015-02-24 11:33:18
mageia
mageia
Updated bind packages fix CVE-2014-8500
2014-12-10 23:09:57
nvd
nvd
CVE-2014-8500
2014-12-11 02:59:00
centos
centos
bind, caching security update
2014-12-12 11:07:42
bind97 security update
2014-12-12 11:03:15
cve
cve
CVE-2014-8500
2014-12-11 02:59:00
ubuntucve
ubuntucve
CVE-2014-8500
2014-12-09 00:00:00
slackware
slackware
[slackware-security] bind
2014-12-11 04:11:21
[slackware-security] bind
2015-04-22 02:16:38
ubuntu
ubuntu
Bind vulnerability
2014-12-09 00:00:00
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-14:29.bind
2014-12-10 00:00:00
ISC bind named DoS
2014-12-10 00:00:00
oraclelinux
oraclelinux
bind97 security update
2014-12-12 00:00:00
bind security update
2014-12-12 00:00:00
bind security update
2015-07-29 00:00:00
prion
prion
Design/Logic Flaw
2014-12-11 02:59:00
checkpoint_advisories
checkpoint_advisories
fedora
fedora
[SECURITY] Fedora 21 Update: bind-9.9.6-5.P1.fc21
2015-01-06 06:04:49
[SECURITY] Fedora 21 Update: bind-9.9.6-8.P1.fc21
2015-03-05 12:38:47
[SECURITY] Fedora 20 Update: bind-9.9.4-17.P2.fc20
2014-12-18 06:10:51
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:29.bind
2014-12-10 00:00:00
redhat
redhat
(RHSA-2014:1985) Important: bind97 security update
2014-12-12 00:00:00
(RHSA-2014:1984) Important: bind security update
2014-12-12 00:00:00
(RHSA-2016:0078) Important: bind security update
2016-01-28 00:00:00
debiancve
debiancve
CVE-2014-8500
2014-12-11 02:59:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:03:25
amazon
amazon
Important: bind
2015-01-08 11:36:00
freebsd
freebsd
bind -- denial of service vulnerability
2014-12-08 00:00:00
gentoo
gentoo
BIND: Multiple Vulnerabilities
2015-02-07 00:00:00
cert
cert
Recursive DNS resolver implementations may follow referrals infinitely
2014-12-09 00:00:00