CVE-2014-3859

CVE-2014-3859 affects ISC BIND 9.x where EDNS option processing is vulnerable to a crafted packet causing an assertion failure and daemon exit, resulting in a denial of service. Concrete references across multiple vendors/inputs confirm exposure in BIND 9.10.0 before P2 and related 9.x releases, ...

CVE-2014-3859: Improper Input Validation

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a crafted packet, as demonstrated by an attack against named, dig, or delv...

ISC BIND 9 EDNS Processing DoS

According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability. The issue exists due to an error in 'libdns' that fails to properly handle Extension Mechanisms for DNS EDNS options. Note that Nessus has not tested for this issue but...