VulnerabilityModified
CVE-2014-8680
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with…
MEDIUM 5.4EPSS 8.99%
Does this matter?
Lower severity and a low EPSS score (8.99%). Track it; it rarely justifies an emergency change on its own.
Description
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- CVSS 2.0
- 5.4 MEDIUMAV:N/AC:H/Au:N/C:N/I:N/A:C
- EPSS
- 8.99% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-284
- Affected
- isc/bind
- Source
- cve@mitre.org
References
- http://security.gentoo.org/glsa/glsa-201502-03.xmlThird Party Advisory
- https://kb.isc.org/article/AA-01217Vendor Advisory
- https://security.netapp.com/advisory/ntap-20190730-0002/
- http://security.gentoo.org/glsa/glsa-201502-03.xmlThird Party Advisory
- https://kb.isc.org/article/AA-01217Vendor Advisory
- https://security.netapp.com/advisory/ntap-20190730-0002/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.