libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.
References
Configurations
History
No history.
Information
Published : 2014-06-13 11:19
Updated : 2024-02-28 12:20
NVD link : CVE-2014-3859
Mitre link : CVE-2014-3859
CVE.ORG link : CVE-2014-3859
JSON object : View
Products Affected
isc
- bind
CWE
CWE-20
Improper Input Validation