CVE-2014-3859

Published: 13 June 2014

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.

Notes

only affected 9.10+

Status

References

• https://kb.isc.org/article/AA-01166/74/CVE-2014-3859%3A-BIND-named-can-crash-due-to-a-defect-in-EDNS-printing-processing.html
• https://www.cve.org/CVERecord?id=CVE-2014-3859
• NVD
• Launchpad
• Debian