Lucene search

K
nvd[email protected]NVD:CVE-2014-8680
HistoryDec 11, 2014 - 2:59 a.m.

CVE-2014-8680

2014-12-1102:59:05
CWE-284
CWE-20
web.nvd.nist.gov
6

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.009

Percentile

82.7%

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.

Affected configurations

Nvd
Node
iscbindMatch9.10.0
OR
iscbindMatch9.10.1

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.009

Percentile

82.7%