Cloudanix VulnDB

CVE-2013-4854

None

CVSS

—

EPSS

34.2%

Published

Jul 29, 2013

CISA due date

—

The record

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 bind9 0 1:9.8.4.dfsg.P1-6+nmu3
Debian:12 bind9 0 1:9.8.4.dfsg.P1-6+nmu3
Debian:13 bind9 0 1:9.8.4.dfsg.P1-6+nmu3
Debian:6.0 bind9 0 1:9.7.3.dfsg-1~squeeze11
Debian:7 bind9 0 1:9.8.4.dfsg.P1-6+nmu2+deb7u1
Mageia:2 bind 0 9.9.3.P2-1.mga2
Mageia:3 bind 0 9.9.3.P2-1.mga3
Red Hat:enterprise_linux:5::server bind97 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:5::server bind97-chroot 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:5::server bind97-debuginfo 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:5::server bind97-devel 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:5::server bind97-libs 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:5::server bind97-utils 0 32:9.7.0-17.P2.el5_9.2
Red Hat:enterprise_linux:6::client bind 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-chroot 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-debuginfo 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-devel 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-libs 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-sdb 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::client bind-utils 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-chroot 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-debuginfo 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-devel 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-libs 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-sdb 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::computenode bind-utils 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-chroot 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-debuginfo 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-devel 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-libs 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-sdb 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::server bind-utils 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-chroot 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-debuginfo 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-devel 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-libs 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-sdb 0 32:9.8.2-0.17.rc1.el6_4.5
Red Hat:enterprise_linux:6::workstation bind-utils 0 32:9.8.2-0.17.rc1.el6_4.5
openSUSE:Tumbleweed bind 0 9.10.3P4-21.1

Related vulnerabilities