Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201502-03
HistoryFeb 07, 2015 - 12:00 a.m.

BIND: Multiple Vulnerabilities

2015-02-0700:00:00
Gentoo Foundation
security.gentoo.org
16

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.898 High

EPSS

Percentile

98.8%

JSON

Background

BIND (Berkeley Internet Name Domain) is a Name Server.

Description

Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker can cause a denial of service condition by the lack of GeoIP databases, or via a large or infinite number of referrals.

Workaround

There is no known workaround at this time.

Resolution

All bind users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-dns/bind-9.10.1_p1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-dns/bind< 9.10.1_p1UNKNOWN

Related

nessus 44
openvas 38
slackware 2
freebsd 1
securityvulns 2
f5 6
cve 3
suse 5
debian 3
osv 2
archlinux 1
oraclelinux 12
checkpoint_advisories 2
prion 3
redhat 3
fedora 7
veracode 1
freebsd_advisory 1
debiancve 3
amazon 1
ubuntucve 3
centos 2
aix 1
mageia 1
ubuntu 1
cert 1
nmap 1
nessus
nessus
GLSA-201502-03 : BIND: Multiple Vulnerabilities
2015-02-09 00:00:00
ISC BIND 9.10.x < 9.10.1-P1 Multiple DoS
2014-12-15 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bind (SSA:2015-111-01)
2015-04-22 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201502-03
2015-09-29 00:00:00
Slackware: Security Advisory (SSA:2015-111-01)
2022-04-21 00:00:00
SUSE: Security Advisory for bind (SUSE-SU-2015:0011-1)
2015-10-13 00:00:00
slackware
slackware
[slackware-security] bind
2015-04-22 02:16:38
[slackware-security] bind
2014-12-11 04:11:21
freebsd
freebsd
bind -- denial of service vulnerability
2014-12-08 00:00:00
securityvulns
securityvulns
ISC bind named DoS
2014-12-10 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:29.bind
2014-12-10 00:00:00
f5
f5
K16108 : BIND vulnerability CVE-2014-8680
2015-02-09 00:00:00
K15927 : BIND vulnerability CVE-2014-8500
2015-09-16 00:00:00
SOL15927 - BIND vulnerability CVE-2014-8500
2014-12-19 00:00:00
cve
cve
CVE-2014-8680
2014-12-11 02:59:00
CVE-2014-8500
2014-12-11 02:59:00
CVE-2014-3214
2014-05-09 01:55:00
suse
suse
Security update for bind (important)
2015-03-12 23:04:54
Security update for bind (important)
2015-01-21 11:04:45
Security update for bind (important)
2015-01-05 21:04:58
debian
debian
[SECURITY] [DSA 3094-1] bind9 security update
2014-12-08 21:42:44
[SECURITY] [DLA 112-1] bind9 security update
2014-12-15 18:43:58
[SECURITY] [DSA 3094-1] bind9 security update
2014-12-08 21:42:44
osv
osv
bind9 - security update
2014-12-15 00:00:00
bind9 - security update
2014-12-08 00:00:00
archlinux
archlinux
bind: denial of service
2014-12-08 00:00:00
oraclelinux
oraclelinux
bind97 security update
2014-12-12 00:00:00
bind security update
2014-12-12 00:00:00
bind security update
2015-07-29 00:00:00
checkpoint_advisories
checkpoint_advisories
ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)
2014-12-21 00:00:00
ISC BIND Recursive Nameservers Prefetch Denial of Service (CVE-2014-3214)
2014-06-25 00:00:00
prion
prion
Design/Logic Flaw
2014-12-11 02:59:00
Code injection
2014-12-11 02:59:00
Authentication flaw
2014-05-09 01:55:00
redhat
redhat
(RHSA-2014:1985) Important: bind97 security update
2014-12-12 00:00:00
(RHSA-2014:1984) Important: bind security update
2014-12-12 00:00:00
(RHSA-2016:0078) Important: bind security update
2016-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: bind-9.9.6-5.P1.fc21
2015-01-06 06:04:49
[SECURITY] Fedora 21 Update: bind-9.9.6-8.P1.fc21
2015-03-05 12:38:47
[SECURITY] Fedora 20 Update: bind-9.9.4-17.P2.fc20
2014-12-18 06:10:51
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:03:25
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:29.bind
2014-12-10 00:00:00
debiancve
debiancve
CVE-2014-8500
2014-12-11 02:59:00
CVE-2014-8680
2014-12-11 02:59:00
CVE-2014-3214
2014-05-09 01:55:00
amazon
amazon
Important: bind
2015-01-08 11:36:00
ubuntucve
ubuntucve
CVE-2014-8680
2014-12-11 00:00:00
CVE-2014-8500
2014-12-09 00:00:00
CVE-2014-3214
2014-05-09 00:00:00
centos
centos
bind, caching security update
2014-12-12 11:07:42
bind97 security update
2014-12-12 11:03:15
aix
aix
Vulnerability in AIX bind,Vulnerability in VIOS bind
2015-02-24 11:33:18
mageia
mageia
Updated bind packages fix CVE-2014-8500
2014-12-10 23:09:57
ubuntu
ubuntu
Bind vulnerability
2014-12-09 00:00:00
cert
cert
Recursive DNS resolver implementations may follow referrals infinitely
2014-12-09 00:00:00
nmap
nmap
vulners NSE Script
2019-06-26 17:06:44

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.898 High

EPSS

Percentile

98.8%

JSON
Related for GLSA-201502-03
nessus44openvas38slackware2freebsd1securityvulns2f56cve3suse5debian3osv2archlinux1oraclelinux12checkpoint_advisories2prion3redhat3fedora7veracode1freebsd_advisory1debiancve3amazon1ubuntucve3centos2aix1mageia1ubuntu1cert1nmap1