Buffer overflow in ISC BIND - CVE-2014-0591
Published: January 14, 2014 / Updated: July 24, 2020
Vulnerability identifier: #VU31837
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-0591
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Affected software
ISC BIND
Amazon Linux AMI
Slackware Linux
bind (Alpine package)
Amazon Linux AMI
Slackware Linux
bind (Alpine package)
How to mitigate CVE-2014-0591
Install update from vendor's website.
bind (Alpine package) - update to 9.9.4_p2-r0
External References
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
- http://linux.oracle.com/errata/ELSA-2014-1244
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html
- http://marc.info/?l=bugtraq&m=138995561732658&w=2
- http://osvdb.org/101973
- http://rhn.redhat.com/errata/RHSA-2014-0043.html
- http://secunia.com/advisories/56425
- http://secunia.com/advisories/56427
- http://secunia.com/advisories/56442
- http://secunia.com/advisories/56493
- http://secunia.com/advisories/56522
- http://secunia.com/advisories/56574
- http://secunia.com/advisories/56871
- http://secunia.com/advisories/61117
- http://secunia.com/advisories/61199
- http://secunia.com/advisories/61343
- http://www.debian.org/security/2014/dsa-3023
- http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:002
- http://www.securityfocus.com/bid/64801
- http://www.securitytracker.com/id/1029589
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465
- http://www.ubuntu.com/usn/USN-2081-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1051717
- https://kb.isc.org/article/AA-01078
- https://kb.isc.org/article/AA-01085
- https://support.apple.com/kb/HT6536