Isc bind Remote Denial of Service Vulnerability (CVE-2014-8500)

Isc bind Remote Denial of Service Vulnerability (CVE-2014-8500)

Release date:
Updated on:

Affected Systems:
Isc bind 9.9.0-> 9.9.6
Isc bind 9.10.0-> 9.10.1
Isc bind 9.0.x-> 9.8.x
Description:
Bugtraq id: 71590
CVE (CAN) ID: CVE-2014-8500

BIND is a widely used DNS protocol.

Isc bind 9.0.x-> 9.8.x, 9.9.0-> 9.9.6, 9.10.0-> 9.10.1 does not properly restrict the authorized proxy link, which allows attackers to maliciously construct a region or server, this vulnerability can be exploited to exhaust CPU and network resources, resulting in DOS.

<* Source: Florian Maury

Link: https://kb.isc.org/article/AA-01216/
*>

Suggestion:
Vendor patch:

ISC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.isc.org/downloads

This article permanently updates the link address: