CVE-2014-8680
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a...
CVE-2014-8680 is a medium vulnerability (CVSS 5.4) in Isc Bind, published December 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.99%, the 95th percentile. No source names a fixed version.
- Severity
- 5.4 MediumCVSS 2.0, NVD
- Exploit chance
- 8.99%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bindopenSUSE:Tumbleweed From an advisory covering 37 CVEs | before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
What each source reports
NVD Score used
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- Record
CVE-2014-8680- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-20, CWE-284
- Updated
- 2026-11-02
CVE ListNo score
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- Record
CVE-2014-8680- Updated
- 2026-11-02
EUVDEUVD-2014-8516No score
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- Record
EUVD-2014-8516- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29cv-f9xj-9653No score
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a...
The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
- Record
GHSA-29cv-f9xj-9653- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
security.gentoo.org/glsa/glsa-201502-03.xml
kb.isc.org/article/AA-01217
security.netapp.com/advisory/ntap-20190730-0002
nvd.nist.gov/vuln/detail/CVE-2014-8680
github.com/advisories/GHSA-29cv-f9xj-9653
suse.com/security/cve/CVE-2009-0696
Show 36 moreShow less