Unrated severityNVD Advisory· Published Jun 13, 2014· Updated Jun 17, 2026

CVE-2014-3859

Description

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Isc/Bind2 versions
cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*
- (no CPE)range: =9.10.0
osv-coords
pkg:rpm/opensuse/bind&distro=openSUSE%20Tumbleweed
Range: < 9.10.3P4-21.1

Patches

Vulnerability mechanics

References

kb.isc.org/article/AA-01166/nvdVendor Advisory
secunia.com/advisories/58946nvd
www.securityfocus.com/bid/68193nvd
www.securitytracker.com/id/1030414nvd
kb.isc.org/article/AA-01171/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000