CVEs-PoC/2014/CVE-2014-8500.md

CVE-2014-8500

Description

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

POC

Reference

• http://www.kb.cert.org/vuls/id/264212
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/Dokukin1/Metasploitable
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/NikulinMS/13-01-hw
• https://github.com/Zhivarev/13-01-hw
• https://github.com/jrmoserbaltimore/open-release-definition
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/zzzWTF/db-13-01