Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.6

ISC BIND 9.6, 9.7, and 9.8 nameservers can crash from malicious DNS queries

CVE-2014-0591 · published 12 years ago
Summary

A malicious DNS query can cause the nameserver to stop working. This affects ISC BIND 9.6, 9.7, and 9.8. To protect your server, update to a fixed version of the software or apply a security patch if available.

What to do
  • Update debian bind9 to version 1:9.9.5.dfsg-2.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian bind9 < 1:9.9.5.dfsg-2
Fix: upgrade to 1:9.9.5.dfsg-2
Debian:12 debian bind9 < 1:9.9.5.dfsg-2
Fix: upgrade to 1:9.9.5.dfsg-2
Debian:13 debian bind9 < 1:9.9.5.dfsg-2
Fix: upgrade to 1:9.9.5.dfsg-2
Debian:14 debian bind9 < 1:9.9.5.dfsg-2
Fix: upgrade to 1:9.9.5.dfsg-2
– isc bind 9.6
9.6.0
9.6.1
9.6.2
9.6.3
9.7.0
9.7.1
9.7.2
9.7.3
9.7.4
9.7.5
9.7.6
9 more version ranges
cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:*
Original advisory text
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a ...
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
References
Severity
2.6 Low
Exploitation
33% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published14 Jan 2014
Updated23 Oct 2026
First seen8 Aug 2026
Sources
DEBIAN-CVE-2014-0591 · OSV
CVE-2014-0591 · NVD
Track software like this
Free during beta