CVE-2014-0591

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.

Published: 2014-01-14 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2014-0591 is rated Low Risk (39.6/100): CVSS Low severity, with high exploitation likelihood (EPSS 51.54%, 98th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2014-0591

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-04 62.03% 51.54% -10.49%
2 2026-03-03 49.57% 62.03% +12.46%
3 2026-03-01 — 49.57% —

Full EPSS history (42 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2014-0591

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
2.6 2.0 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
 4.9 2.9 [email protected]

Weakness enumeration for CVE-2014-0591

OS Trackers for CVE-2014-0591

vendor priority summary link
debian not yet assigned CVE-2014-0591 not yet assigned priority: Debian including 1 source packages (bind9), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2014-0591
gentoo normal CVE-2014-0591: 1 GLSA(s) (201401-34), 1 atom(s) (net-dns/bind); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2014-0591
redhat medium — https://access.redhat.com/security/cve/CVE-2014-0591
suse medium CVE-2014-0591 severity moderate: SUSE including 166 source package names (bind-9.10.3P4-21.1, bind-9.11.2-1.24, …), 254 product×package rows across 40 product lines (SUSE Linux Enterprise Desktop 11 SP2, SUSE Linux Enterprise Desktop 11 SP3, … (40 product lines)): Fixed 254. https://www.suse.com/security/cve/CVE-2014-0591/
ubuntu medium CVE-2014-0591 medium priority: Ubuntu including 1 source packages (bind9), 6 status rows across 6 suites (lucid, precise, quantal, raring, saucy, upstream): released 6. https://ubuntu.com/security/CVE-2014-0591

Affected software / configurations for CVE-2014-0591

Vendor Product Version Raw CPE
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:*:*:*:*
isc bind 9.6 cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:*:*:*:*
isc bind 9.6.0 cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*
isc bind 9.6.0 cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*
isc bind 9.6.0 cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*
isc bind 9.6.0 cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*
isc bind 9.6.1 cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*
isc bind 9.6.1 cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:*
isc bind 9.6.1 cpe:2.3:a:isc:bind:9.6.1:p2:*:*:*:*:*:*
isc bind 9.6.1 cpe:2.3:a:isc:bind:9.6.1:p3:*:*:*:*:*:*
isc bind 9.6.1 cpe:2.3:a:isc:bind:9.6.1:rc1:*:*:*:*:*:*
isc bind 9.6.2 cpe:2.3:a:isc:bind:9.6.2:*:*:*:*:*:*:*
isc bind 9.6.2 cpe:2.3:a:isc:bind:9.6.2:rc1:*:*:*:*:*:*
isc bind 9.6.3 cpe:2.3:a:isc:bind:9.6.3:*:*:*:*:*:*:*
isc bind 9.6.3 cpe:2.3:a:isc:bind:9.6.3:rc1:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:p2:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:*
isc bind 9.7.0 cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:*
isc bind 9.7.1 cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:*
isc bind 9.7.1 cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:*
isc bind 9.7.1 cpe:2.3:a:isc:bind:9.7.1:p2:*:*:*:*:*:*
isc bind 9.7.1 cpe:2.3:a:isc:bind:9.7.1:rc1:*:*:*:*:*:*
isc bind 9.7.2 cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:*
isc bind 9.7.2 cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:*
isc bind 9.7.2 cpe:2.3:a:isc:bind:9.7.2:p2:*:*:*:*:*:*
isc bind 9.7.2 cpe:2.3:a:isc:bind:9.7.2:p3:*:*:*:*:*:*
isc bind 9.7.2 cpe:2.3:a:isc:bind:9.7.2:rc1:*:*:*:*:*:*
isc bind 9.7.3 cpe:2.3:a:isc:bind:9.7.3:*:*:*:*:*:*:*
isc bind 9.7.3 cpe:2.3:a:isc:bind:9.7.3:b1:*:*:*:*:*:*
isc bind 9.7.3 cpe:2.3:a:isc:bind:9.7.3:p1:*:*:*:*:*:*
isc bind 9.7.3 cpe:2.3:a:isc:bind:9.7.3:rc1:*:*:*:*:*:*
isc bind 9.7.4 cpe:2.3:a:isc:bind:9.7.4:*:*:*:*:*:*:*
isc bind 9.7.4 cpe:2.3:a:isc:bind:9.7.4:b1:*:*:*:*:*:*
isc bind 9.7.4 cpe:2.3:a:isc:bind:9.7.4:p1:*:*:*:*:*:*
isc bind 9.7.4 cpe:2.3:a:isc:bind:9.7.4:rc1:*:*:*:*:*:*
isc bind 9.7.5 cpe:2.3:a:isc:bind:9.7.5:*:*:*:*:*:*:*
isc bind 9.7.5 cpe:2.3:a:isc:bind:9.7.5:b1:*:*:*:*:*:*
isc bind 9.7.5 cpe:2.3:a:isc:bind:9.7.5:rc1:*:*:*:*:*:*
isc bind 9.7.5 cpe:2.3:a:isc:bind:9.7.5:rc2:*:*:*:*:*:*
isc bind 9.7.6 cpe:2.3:a:isc:bind:9.7.6:*:*:*:*:*:*:*
isc bind 9.7.6 cpe:2.3:a:isc:bind:9.7.6:p1:*:*:*:*:*:*
isc bind 9.7.6 cpe:2.3:a:isc:bind:9.7.6:p2:*:*:*:*:*:*
isc bind 9.7.7 cpe:2.3:a:isc:bind:9.7.7:*:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:*
isc bind 9.8.0 cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:*
isc bind 9.8.1 cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:*
isc bind 9.8.2 cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:*
isc bind 9.8.2 cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:*
isc bind 9.8.2 cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:*
isc bind 9.8.3 cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:*
isc bind 9.8.3 cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:*
isc bind 9.8.3 cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:*
isc bind 9.8.4 cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:*:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:b1:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:b2:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:p1:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:p2:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:rc1:*:*:*:*:*:*
isc bind 9.8.5 cpe:2.3:a:isc:bind:9.8.5:rc2:*:*:*:*:*:*
isc bind 9.8.6 cpe:2.3:a:isc:bind:9.8.6:*:*:*:*:*:*:*

References for CVE-2014-0591

URL Tags
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
http://linux.oracle.com/errata/ELSA-2014-1244
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html
http://marc.info/?l=bugtraq&m=138995561732658&w=2
http://osvdb.org/101973
http://rhn.redhat.com/errata/RHSA-2014-0043.html
http://secunia.com/advisories/56425
http://secunia.com/advisories/56427
http://secunia.com/advisories/56442
http://secunia.com/advisories/56493
http://secunia.com/advisories/56522
http://secunia.com/advisories/56574
http://secunia.com/advisories/56871
http://secunia.com/advisories/61117
http://secunia.com/advisories/61199
http://secunia.com/advisories/61343
http://www.debian.org/security/2014/dsa-3023
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc
http://www.mandriva.com/security/advisories?name=MDVSA-2014:002
http://www.securityfocus.com/bid/64801
http://www.securitytracker.com/id/1029589
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465
http://www.ubuntu.com/usn/USN-2081-1
https://bugzilla.redhat.com/show_bug.cgi?id=1051717
https://kb.isc.org/article/AA-01078 Vendor Advisory
https://kb.isc.org/article/AA-01085 Vendor Advisory
https://support.apple.com/kb/HT6536
cvelogic Threat Intelligence