2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-01 15:05:23 +00:00

[master] add CVE

This commit is contained in:
Evan Hunt
2014-11-18 00:04:42 -08:00
parent 3230429e17
commit 90fc237a1f

View File

@@ -24,15 +24,16 @@
named run-time, the previously loaded GeoIP named run-time, the previously loaded GeoIP
data could remain, potentially causing wrong data could remain, potentially causing wrong
ACLs to be used or wrong results to be served ACLs to be used or wrong results to be served
based on geolocation. [RT #37720] based on geolocation (CVE-2014-8680). [RT #37720]
4002. [security] Lookups in GeoIP databases that were not 4002. [security] Lookups in GeoIP databases that were not
loaded could cause an assertion failure. loaded could cause an assertion failure
[RT #37679] (CVE-2014-8680). [RT #37679]
4001. [security] The caching of GeoIP lookups did not always 4001. [security] The caching of GeoIP lookups did not always
handle address families correctly, potentially handle address families correctly, potentially
resulting in an assertion failure. [RT #37672] resulting in an assertion failure (CVE-2014-8680).
[RT #37672]
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET 4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722] from the redirect zone. [RT #37722]