CVE-2014-8500: High severity isc bind 9 vulnerability

Published Dec 11, 2014

Updated

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

Affected Software

63 affected components

ISC BIND=9.0

ISC BIND=9.0.1

ISC BIND=9.1

ISC BIND=9.1.1

ISC BIND=9.1.2

ISC BIND=9.1.3

ISC BIND=9.2

ISC BIND=9.2.0

ISC BIND=9.2.1

ISC BIND=9.2.2

ISC BIND=9.2.3

ISC BIND=9.2.4

ISC BIND=9.2.5

ISC BIND=9.2.6

ISC BIND=9.2.7

ISC BIND=9.2.8

ISC BIND=9.2.9

ISC BIND=9.3

ISC BIND=9.3.0

ISC BIND=9.3.1

ISC BIND=9.3.2

ISC BIND=9.3.3

ISC BIND=9.3.4

ISC BIND=9.3.5

ISC BIND=9.3.6

ISC BIND=9.4

ISC BIND=9.4.0

ISC BIND=9.4.1

ISC BIND=9.4.2

ISC BIND=9.4.3

ISC BIND=9.5

ISC BIND=9.5.0

ISC BIND=9.5.1

ISC BIND=9.5.2

ISC BIND=9.5.3

ISC BIND=9.6.0

ISC BIND=9.6.1

ISC BIND=9.6.2

ISC BIND=9.6.3

ISC BIND=9.7.0

ISC BIND=9.7.1

ISC BIND=9.7.2

ISC BIND=9.7.3

ISC BIND=9.7.4

ISC BIND=9.7.5

ISC BIND=9.7.6

ISC BIND=9.7.7

ISC BIND=9.8.0

ISC BIND=9.8.1

ISC BIND=9.8.2

ISC BIND=9.8.3

ISC BIND=9.8.4

ISC BIND=9.8.5

ISC BIND=9.8.6

ISC BIND=9.9.0

ISC BIND=9.9.1

ISC BIND=9.9.2

ISC BIND=9.9.3

ISC BIND=9.9.4

ISC BIND=9.9.5

ISC BIND=9.9.6

ISC BIND=9.10.0

ISC BIND=9.10.1

Remediation

Patch Available

http://ubuntu.com/usn/usn-2437-1

Event History

Dec 11, 2014

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8500?

CVE-2014-8500 is considered a high severity vulnerability due to its potential to cause denial of service through memory exhaustion and crashes.

How do I fix CVE-2014-8500?

To fix CVE-2014-8500, you should upgrade ISC BIND to version 9.10.2-P2 or later, or apply any patches provided by your distribution.

What systems are affected by CVE-2014-8500?

CVE-2014-8500 affects ISC BIND versions 9.0.x through 9.10.1, including various subversions within these ranges.

What is the impact of exploiting CVE-2014-8500?

Exploiting CVE-2014-8500 can lead to significant memory consumption, resulting in a denial of service by causing the BIND server to crash.

How can I check if my BIND version is vulnerable to CVE-2014-8500?

You can check if your BIND version is vulnerable to CVE-2014-8500 by running the command 'named -v' in the terminal and comparing it with the affected versions.