CVE:CVE-2014-8602
CNNVD:CNNVD-201412-269
NLnet Labs Unbound是荷兰NLnet实验室负责维护的一套基于C语言的开源递归式DNS服务器软件。
NLnet Labs Unbound 1.5.1之前版本的iterator.c文件中存在安全漏洞，该漏洞源于程序没有正确限制授权链。远程攻击者可利用该漏洞造成拒绝服务（内存和CPU资源耗尽）。
solution:Upgrade nlnetlabs unbound to a higher version than 1.5.0,and avoid the version (,1.5.0]; Upgrade canonical ubuntu_linux to a higher version than 14.04,14.10,and avoid the version 14.04,14.10; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0