CVE-2014-8680

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-12-11 · updated 2026-06-17
Weakness: CWE-20

Description

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.

Affected products

ISC BIND: 9.10.0, 9.10.1

References

http://security.gentoo.org/glsa/glsa-201502-03.xml
https://kb.isc.org/article/AA-01217
https://security.netapp.com/advisory/ntap-20190730-0002/
http://security.gentoo.org/glsa/glsa-201502-03.xml
https://kb.isc.org/article/AA-01217
https://security.netapp.com/advisory/ntap-20190730-0002/

Get alerted when CVE-2014-8680 or the next vulnerability affects your stack