CVE-2014-8680
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- Score
- CVSS 2.0 5.4 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2014-12-11
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20, CWE-284
Affected products
References
- http://security.gentoo.org/glsa/glsa-201502-03.xml
- https://kb.isc.org/article/AA-01217
- https://security.netapp.com/advisory/ntap-20190730-0002/