CVE-2014-3859

published 2014-06-13

CVE-2014-3859: libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion…

medium 5 CVSS 3.1

AV N AC L Au N C N I N A P

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	bind9	—	—
isc	bind	—	—

CWE-20