CVE-2014-8500

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...

7.8 HighFix available

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

Exploit likelihood

59.0%Up 32.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2014-8500
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8500
Updated: 2026-11-02

EUVDEUVD-2014-8337 No score

Record: EUVD-2014-8337
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qcv9-4m2r-585w No score

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...

Record: GHSA-qcv9-4m2r-585w
Updated: 2026-11-02

OSV No score

Record: CVE-2014-8500
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-8500 No score

Record: DEBIAN-CVE-2014-8500
Updated: 2026-11-02

Show 7 moreShow less

OSVMGASA-2014-0524 No score

Updated bind packages fix CVE-2014-8500

Updated bind packages fix security vulnerability:

By making use of maliciously-constructed zones or a rogue server, an attacker can exploit an oversight in the code BIND 9 uses to follow delegations in the Domain Name Service, causing BIND to issue unlimited queries in an attempt to follow the delegation. This can lead to resource exhaustion and denial of service (up to and including termination of the named server process) (CVE-2014-8500).

Record: MGASA-2014-0524
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10467-1 No score

bind-9.10.3P4-21.1 on GA media

These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10467-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0011-2 No score

Security update for bind

This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.

Security Issue references:

* CVE-2014-0591
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591>

Record: SUSE-SU-2015:0011-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0480-1 No score

Security update for bind

This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.

Security Issue references:

* CVE-2014-0591
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591>

Record: SUSE-SU-2015:0480-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1205-1 No score

Security update for bind

This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.

Security Issue references:

* CVE-2014-0591
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591>

Record: SUSE-SU-2015:1205-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-8500 No score

Record: UBUNTU-CVE-2014-8500
Updated: 2026-11-02

OSVUSN-2437-1 No score

bind9 vulnerability

Florian Maury discovered that Bind incorrectly handled delegation. A remote attacker could possibly use this issue to cause Bind to consume resources and crash, resulting in a denial of service.

Record: USN-2437-1
Updated: 2026-11-02

Affected products

isc bind

Affected packages

Affected packages
Package	Affected	Fixed
`bind9` Debian:12	before 1:9.9.5.dfsg-7	1:9.9.5.dfsg-7
`bind9` Debian:13	before 1:9.9.5.dfsg-7	1:9.9.5.dfsg-7
`bind9` Debian:14	before 1:9.9.5.dfsg-7	1:9.9.5.dfsg-7
`bind9` Debian:6.0	before 1:9.7.3.dfsg-1~squeeze13, plus listed versions 1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze101:9.7.3.dfsg-1~squeeze111:9.7.3.dfsg-1~squeeze12 Show 11 moreShow less 1:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+11:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+11:9.7.3.dfsg-1~squeeze41:9.7.3.dfsg-1~squeeze51:9.7.3.dfsg-1~squeeze61:9.7.3.dfsg-1~squeeze71:9.7.3.dfsg-1~squeeze81:9.7.3.dfsg-1~squeeze9	1:9.7.3.dfsg-1~squeeze13
`bind9` Debian:7	before 1:9.8.4.dfsg.P1-6+nmu2+deb7u3, plus listed versions 1:9.8.4.dfsg.P1-6+nmu21:9.8.4.dfsg.P1-6+nmu2+deb7u11:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u21:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+1	1:9.8.4.dfsg.P1-6+nmu2+deb7u3
`bind` Mageia:4	before 9.9.6.P1-1.mga4	9.9.6.P1-1.mga4
`bind` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-debuginfo` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-libs` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-sdb` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2

Show 116 moreShow less

Affected packages
Package	Affected	Fixed
`bind-utils` Red Hat:enterprise_linux:5::client	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-chroot` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-devel` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-libbind-devel` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`caching-nameserver` Red Hat:enterprise_linux:5::client_workstation	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-chroot` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-debuginfo` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-devel` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-libbind-devel` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-libs` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-sdb` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind-utils` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`caching-nameserver` Red Hat:enterprise_linux:5::server	before 30:9.3.6-25.P1.el5_11.2	30:9.3.6-25.P1.el5_11.2
`bind` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-debuginfo` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-libs` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-utils` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-chroot` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-devel` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-sdb` Red Hat:enterprise_linux:6::client	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-debuginfo` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-libs` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-utils` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-chroot` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-devel` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-sdb` Red Hat:enterprise_linux:6::computenode	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-chroot` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-debuginfo` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-libs` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-utils` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-devel` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-sdb` Red Hat:enterprise_linux:6::server	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-chroot` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-debuginfo` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-libs` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-utils` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-devel` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind-sdb` Red Hat:enterprise_linux:6::workstation	before 32:9.8.2-0.30.rc1.el6_6.1	32:9.8.2-0.30.rc1.el6_6.1
`bind` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-debuginfo` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs-lite` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-license` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-utils` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-chroot` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-devel` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-lite-devel` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb-chroot` Red Hat:enterprise_linux:7::client	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-debuginfo` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs-lite` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-license` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-utils` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-chroot` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-devel` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-lite-devel` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb-chroot` Red Hat:enterprise_linux:7::computenode	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-chroot` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-debuginfo` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs-lite` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-license` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-utils` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-devel` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-lite-devel` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb-chroot` Red Hat:enterprise_linux:7::server	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-chroot` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-debuginfo` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-libs-lite` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-license` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-utils` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-devel` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-lite-devel` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind-sdb-chroot` Red Hat:enterprise_linux:7::workstation	before 32:9.9.4-14.el7_0.1	32:9.9.4-14.el7_0.1
`bind97` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-chroot` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-devel` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-libs` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-utils` Red Hat:enterprise_linux:5::client_workstation	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-chroot` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-debuginfo` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-devel` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-libs` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind97-utils` Red Hat:enterprise_linux:5::server	before 32:9.7.0-21.P2.el5_11.1	32:9.7.0-21.P2.el5_11.1
`bind` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-chroot` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-debuginfo` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-libs` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-utils` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-chroot` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-debuginfo` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-libs` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-utils` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-devel` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-sdb` Red Hat:rhel_aus:6.4::server	before 32:9.8.2-0.17.rc1.el6_4.7	32:9.8.2-0.17.rc1.el6_4.7
`bind-devel` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind-sdb` Red Hat:rhel_aus:6.5::server	before 32:9.8.2-0.23.rc1.el6_5.2	32:9.8.2-0.23.rc1.el6_5.2
`bind9` Ubuntu:14.04:LTS	before 1:9.9.5.dfsg-3ubuntu0.1, plus listed versions 1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3	1:9.9.5.dfsg-3ubuntu0.1
`bind` openSUSE:Tumbleweed	before 9.10.3P4-21.1	9.10.3P4-21.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8500 is a high vulnerability (CVSS 7.8) in Isc Bind, published January 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 59.0%, the 99th percentile. Fixed in bind9 1:9.9.5.dfsg-7.

References

Show 119 moreShow less