{"id":"CVE-2014-0591","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0591","generatedAt":"2026-11-05T07:17:07.913Z","title":"The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon…","description":"The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.","published":"2014-01-14T04:29:57.000Z","lastModified":"2026-06-17T00:03:20.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":2.6,"severity":"LOW","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P"},"cwe":["CWE-119"],"affected":["isc/bind"],"epss":{"score":0.32663,"percentile":0.98348,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 32.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"cve@mitre.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1244","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=138995561732658&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/101973","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0043.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56442","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56493","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/56871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/61117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/61199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/61343","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2014/dsa-3023","source":"cve@mitre.org"},{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/64801","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1029589","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2081-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1051717","source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01078","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01085","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT6536","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=138995561732658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/101973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2081-1","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0591","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}