ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

BID:64801

Info

ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

Bugtraq ID: 64801
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2014-0591
Remote: Yes
Local: No
Published: Jan 14 2014 12:00AM
Updated: Apr 13 2015 09:21PM
Credit: Jared Mauch
Vulnerable: Xerox FreeFlow Print Server (FFPS) 93.E0.21C
Xerox FreeFlow Print Server (FFPS) 90.D3.06
Xerox FreeFlow Print Server (FFPS) 82.D2.24
Xerox FreeFlow Print Server (FFPS) 82.D1.44
Xerox FreeFlow Print Server (FFPS) 82.C5.24
Xerox FreeFlow Print Server (FFPS) 81.D0.73
Xerox FreeFlow Print Server (FFPS) 81.C3.31
Xerox FreeFlow Print Server (FFPS) 73.D4.31B
Xerox FreeFlow Print Server (FFPS) 73.D4.31
Xerox FreeFlow Print Server (FFPS) 73.D2.33
Ubuntu Ubuntu Linux 13.10
Ubuntu Ubuntu Linux 13.04
Ubuntu Ubuntu Linux 12.10
Ubuntu Ubuntu Linux 12.04
Ubuntu Ubuntu Linux 10.04 LTS
SuSE SUSE Linux Enterprise Server 11 SP1 LTSS
+ Linux kernel 2.6.5
+ Linux kernel 2.6.5
Slackware Slackware Linux 14.1
Slackware Slackware Linux 14.0
Slackware Slackware Linux 13.37
Slackware Slackware Linux 13.1
Slackware Slackware Linux 13.0
Slackware Linux 14.1
Slackware Linux 14.0
Slackware Linux 13.37
Slackware Linux 13.1
Slackware Linux 13.0
Redhat Enterprise Linux Desktop Workstation 5 client
Redhat Enterprise Linux 5 Server
Oracle Solaris 9
Oracle Solaris 11.1
Oracle Solaris 10
Oracle Enterprise Linux 5
Mandriva Business Server 1 X86 64
Mandriva Business Server 1
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
ISC Dnsco Bind 9.9.4 S1b1
ISC Bind 9.8.4
ISC Bind 9.8
ISC Bind 9.7.5
ISC Bind 9.7.4
ISC Bind 9.7.2
ISC Bind 9.6.3
ISC Bind 9.6.2
ISC Bind 9.6.1 P3
ISC Bind 9.6.1
ISC BIND 9.6
ISC BIND 4.9.9
ISC BIND 4.9.6
ISC Bind 9.9.4-P1
ISC Bind 9.9.4 B1
ISC Bind 9.9.3-S1-P1
ISC Bind 9.9.3-P2
ISC Bind 9.9.3-P1
ISC Bind 9.9.3-b1
ISC Bind 9.9.3 Rc2
ISC Bind 9.9.3 Rc1
ISC Bind 9.9.3 P2
ISC Bind 9.9.3 P1
ISC Bind 9.9.3 B2
ISC Bind 9.9.3 B1
ISC Bind 9.9.3
ISC Bind 9.9.2-P2
ISC Bind 9.9.2-P1
ISC Bind 9.9.2
ISC Bind 9.9.1-P4
ISC Bind 9.9.1-P3
ISC Bind 9.9.1-P2
ISC Bind 9.9.1-P1
ISC Bind 9.9.1 P2
ISC Bind 9.9.1 P1
ISC Bind 9.9.1
ISC Bind 9.9.0 Rc4
ISC Bind 9.9.0 Rc3
ISC Bind 9.9.0 Rc2
ISC Bind 9.9.0 Rc1
ISC Bind 9.9.0 B2
ISC Bind 9.9.0 B1
ISC Bind 9.9.0 A3
ISC Bind 9.9.0 A2
ISC Bind 9.9.0 A1
ISC Bind 9.9.0
ISC Bind 9.8.6-P1
ISC Bind 9.8.6 B1
ISC Bind 9.8.5-P2
ISC Bind 9.8.5-P1
ISC Bind 9.8.5-b1
ISC Bind 9.8.5 Rc2
ISC Bind 9.8.5 Rc1
ISC Bind 9.8.5 P2
ISC Bind 9.8.5 P1
ISC Bind 9.8.5 B2
ISC Bind 9.8.5 B1
ISC Bind 9.8.5
ISC Bind 9.8.4-P2
ISC Bind 9.8.4-P1
ISC Bind 9.8.3-P4
ISC Bind 9.8.3-P3
ISC Bind 9.8.3-P2
ISC Bind 9.8.3-P1
ISC Bind 9.8.3 P2
ISC Bind 9.8.3 P1
ISC Bind 9.8.3
ISC Bind 9.8.2 Rc2
ISC Bind 9.8.2 Rc1
ISC Bind 9.8.2 B1
ISC Bind 9.8.1b1
ISC Bind 9.8.1-P1
ISC Bind 9.8.1 Rc1
ISC Bind 9.8.1 P1
ISC Bind 9.8.1 B3
ISC Bind 9.8.1 B2
ISC Bind 9.8.1 B1
ISC Bind 9.8.1
ISC Bind 9.8.0-P4
ISC Bind 9.8.0-P3
ISC Bind 9.8.0-P2
ISC Bind 9.8.0-P1
ISC Bind 9.8.0 Rc1
ISC Bind 9.8.0 P4
ISC Bind 9.8.0 P2
ISC Bind 9.8.0 P1
ISC Bind 9.8.0 B1
ISC Bind 9.8.0 A1
ISC Bind 9.8
ISC Bind 9.7.7
ISC Bind 9.7.6-P4
ISC Bind 9.7.6-P3
ISC Bind 9.7.6-P2
ISC Bind 9.7.6-P1
ISC Bind 9.7.6 P2
ISC Bind 9.7.6 P1
ISC Bind 9.7.6
ISC Bind 9.7.5 Rc2
ISC Bind 9.7.5 Rc1
ISC Bind 9.7.5 B1
ISC Bind 9.7.4b1
ISC Bind 9.7.4-P1
ISC Bind 9.7.4 Rc1
ISC Bind 9.7.4 P1
ISC Bind 9.7.4 B1
ISC Bind 9.7.3-P3
ISC Bind 9.7.3-P2
ISC Bind 9.7.3-P1
ISC Bind 9.7.3 Rc1
ISC Bind 9.7.3 P1
ISC Bind 9.7.3 B1
ISC Bind 9.7.3
ISC Bind 9.7.2-P3
ISC Bind 9.7.2-P2
ISC Bind 9.7.2-P1
ISC Bind 9.7.2 Rc1
ISC Bind 9.7.2 P3
ISC Bind 9.7.2 P2
ISC Bind 9.7.2 P1
ISC Bind 9.7.1B1
ISC BIND 9.7.1-P2
ISC Bind 9.7.1 Rc1
ISC Bind 9.7.1 P2
ISC BIND 9.7.1 P1
ISC BIND 9.7.1
ISC Bind 9.7.0B3
ISC Bind 9.7.0B2
ISC Bind 9.7.0B1
ISC Bind 9.7.0A3
ISC Bind 9.7.0A2
ISC Bind 9.7.0A1
ISC Bind 9.7.0-P1
ISC Bind 9.7.0 Rc2
ISC Bind 9.7.0 Rc1
ISC BIND 9.7.0 P2
ISC Bind 9.7.0 P1
ISC Bind 9.7.0 Beta
ISC BIND 9.7.0
ISC Bind 9.7
ISC Bind 9.6.3B1
ISC Bind 9.6.3 Rc1
ISC Bind 9.6.2B1
ISC Bind 9.6.2-P3
ISC Bind 9.6.2-P2
ISC Bind 9.6.2-P1
ISC Bind 9.6.2 Rc1
ISC Bind 9.6.1B1
ISC BIND 9.6.1-P3
ISC BIND 9.6.1-P2
ISC Bind 9.6.1 Rc1
ISC Bind 9.6.1 P2
ISC Bind 9.6.1 P1
ISC BIND 9.6.0-P1
ISC Bind 9.6-ESV-R9-P1
ISC Bind 9.6-Esv-R9 P1
ISC Bind 9.6-ESV-R9
ISC Bind 9.6-ESV-R8
ISC Bind 9.6-ESV-R7-P4
ISC Bind 9.6-ESV-R7-P3
ISC Bind 9.6-ESV-R7-P2
ISC Bind 9.6-ESV-R7-P1
ISC Bind 9.6-Esv-R7 P2
ISC Bind 9.6-Esv-R7 P1
ISC Bind 9.6-ESV-R7
ISC Bind 9.6-Esv-R6 Rc2
ISC Bind 9.6-Esv-R6 Rc1
ISC Bind 9.6-Esv-R6 B1
ISC Bind 9.6-Esv-R6
ISC Bind 9.6-ESV-R5b1
ISC Bind 9.6-ESV-R5-P1
ISC Bind 9.6-Esv-R5 P1
ISC Bind 9.6-Esv-R5
ISC Bind 9.6-ESV-R4-P3
ISC Bind 9.6-ESV-R4-P1
ISC Bind 9.6-ESV-R4
ISC Bind 9.6-ESV-R3
ISC Bind 9.6-Esv-R2
ISC Bind 9.6-ESV-R10-P1
ISC Bind 9.6-Esv-R1
ISC Bind 9.6-ESV
ISC Bind 9.6 -ESV R1
ISC Bind 9.6
HP HP-UX B.11.31
Gentoo Linux
FreeBSD FreeBSD 9.2-STABLE
FreeBSD FreeBSD 9.2-RELENG
FreeBSD FreeBSD 9.2-RC3-p1
FreeBSD FreeBSD 9.2-RC2-p2
FreeBSD FreeBSD 9.2-RC2
FreeBSD FreeBSD 9.2-RC1-p2
FreeBSD FreeBSD 9.2-RC1
FreeBSD FreeBSD 9.2 Rc2
FreeBSD FreeBSD 9.2 Rc1
FreeBSD FreeBSD 9.2 Prerelease
FreeBSD FreeBSD 9.2
FreeBSD FreeBSD 9.1-STABLE
FreeBSD FreeBSD 9.1-RELENG
FreeBSD FreeBSD 9.1-RELEASE-p7
FreeBSD FreeBSD 9.1-RELEASE-p3
FreeBSD FreeBSD 9.1-RELEASE-p1
FreeBSD FreeBSD 9.1-RC2
FreeBSD FreeBSD 9.1-RC1
FreeBSD FreeBSD 9.1--RELENG
FreeBSD FreeBSD 9.1 Release-P5
FreeBSD FreeBSD 9.1 Release-P4
FreeBSD FreeBSD 9.1
FreeBSD FreeBSD 9.0-STABLE
FreeBSD FreeBSD 9.0-RELENG
FreeBSD FreeBSD 9.0-RELEASE-p6
FreeBSD FreeBSD 9.0-RELEASE
FreeBSD FreeBSD 9.0-RC3
FreeBSD FreeBSD 9.0-RC1
FreeBSD FreeBSD 9.0--RELENG
FreeBSD FreeBSD 9.0
FreeBSD FreeBSD 8.4-STABLE
FreeBSD FreeBSD 8.4-RELENG
FreeBSD FreeBSD 8.4-RELEASE-p4
FreeBSD FreeBSD 8.4-RC2-p1
FreeBSD FreeBSD 8.4-RC1-p1
FreeBSD FreeBSD 8.4-PRERELEASE
FreeBSD FreeBSD 8.4-BETA1
FreeBSD FreeBSD 8.4
FreeBSD FreeBSD 8.3-STABLE
FreeBSD FreeBSD 8.3-RELENG
FreeBSD FreeBSD 8.3-RELEASE-p8
FreeBSD FreeBSD 8.3-RELEASE-p6
FreeBSD FreeBSD 8.3-RELEASE-p11
FreeBSD FreeBSD 8.3
FreeBSD FreeBSD 8.2-STABLE
FreeBSD FreeBSD 8.2-RELEASE-p2
FreeBSD FreeBSD 8.2-RELEASE-p1
FreeBSD FreeBSD 8.2-RELEASE
FreeBSD FreeBSD 8.2 - RELEASE -p3
FreeBSD FreeBSD 8.2
FreeBSD FreeBSD 8.1-STABLE
FreeBSD FreeBSD 8.1-RELENG
FreeBSD FreeBSD 8.1-RELEASE-p5
FreeBSD FreeBSD 8.1-RELEASE-p4
FreeBSD FreeBSD 8.1-RELEASE-p1
FreeBSD FreeBSD 8.1-RELEASE
FreeBSD FreeBSD 8.1-PRERELEASE
FreeBSD FreeBSD 8.1
FreeBSD FreeBSD 8.0-STABLE
FreeBSD FreeBSD 8.0-RELEASE
FreeBSD FreeBSD 8.0-RC1
FreeBSD FreeBSD 8.0 -RELEASE-p5
FreeBSD FreeBSD 8.0
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
CentOS CentOS 5
Bluecat Networks Adonis (Firmware) 5.1.1
Bluecat Networks Adonis (Firmware) 5.1 .8
Bluecat Networks Adonis (Firmware) 5.1 .7
Bluecat Networks Adonis (Firmware) 5.1
Bluecat Networks Adonis (Firmware) 5.0.5
Bluecat Networks Adonis (Firmware) 5.0.2 .8
Bluecat Networks Adonis (Firmware) 4.1 .43
Bluecat Networks Adonis (Firmware) 6.7.2
Bluecat Networks Adonis (Firmware) 5.0
Avaya one-X Client Enablement Services 6.2
Avaya IP Office Server Edition 9.0
Avaya IP Office Server Edition 8.1
Avaya IP Office Server Edition 8.0
Avaya IP Office Application Server 9.0
Avaya CMS R17ac.h
Avaya CMS R17ac.g
Avaya CMS r17
Avaya Aura Session Manager 6.3.1
Avaya Aura Session Manager 6.3
Avaya Aura Experience Portal 6.0.2
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Experience Portal 6.0.1
Avaya Aura Experience Portal 7.0
Avaya Aura Experience Portal 6.0 SP2
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Experience Portal 6.0 SP1
Avaya Aura Experience Portal 6.0
Avaya Aura Collaboration Environment 2.0
Apple Mac OS X Server 3.0
Apple Mac OS X Server 2.0
Not Vulnerable: Oracle Solaris 11.1.16.5.0
ISC Bind 9.9.4-P2
ISC Bind 9.8.6-P2
ISC Bind 9.6-ESV-R10-P2
Apple Mac OS X Server 4.0

Discussion

ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

ISC BIND is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Exploit / POC

ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Solution / Fix

ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

References

ISC BIND NSEC3 Signed Zones Queries Handling Remote Denial of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report