CVE-2013-4854
At a glance Severity Not available EPSS EPSS 34.15 % · percentile 98 (2026-10-27) State PUBLISHED Published 2013-07-26 Updated 2024-08-06 Assigner mitre NVD status Modified Description The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Scores Version Score Vector Scored by CVSS 2.0 HIGH 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.0:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.1:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.1:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.2:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.2:p3:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.2:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.3:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.3:b1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.3:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.3:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.4:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.4:b1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.4:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.4:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.5:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.5:b1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.5:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.5:rc2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.6:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.6:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.6:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.7.7:*:*:*:*:*:*:*cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp2:*:*:*:*:*:*cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*cpe:2.3:o:novell:suse_linux:11:*:server:*:*:*:*:*cpe:2.3:a:isc:dnsco_bind:9.9.3:s1:*:*:*:*:*:*cpe:2.3:a:isc:dnsco_bind:9.9.4:s1b1:*:*:*:*:*:*cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:*+68 more Affected products Product Versions affected n/a
References
Sources
