CVE-2013-4854

CVSS v2.0 7.8 (High)

EPSS 95.43 % (99^th)

Affected Products 13

Advisories 15

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2013-07-29 13:59:37
(11 years ago)
Updated Date: 2019-04-22 17:48:00
(5 years ago)

Affected Products

Isc

Mandriva

Novell

Opensuse

Opensuse

Redhat

Enterprise Linux

Slackware

Slackware Linux

Suse

Suse Linux Enterprise Software Development Kit

Configuration #1

		CPE23	From	Up To
	Isc Bind 9.7.0	cpe:2.3:a:isc:bind:9.7.0
	Isc Bind 9.7.0 B1	cpe:2.3:a:isc:bind:9.7.0:b1
	Isc Bind 9.7.0 P1	cpe:2.3:a:isc:bind:9.7.0:p1
	Isc Bind 9.7.0 P2	cpe:2.3:a:isc:bind:9.7.0:p2
	Isc Bind 9.7.0 Rc1	cpe:2.3:a:isc:bind:9.7.0:rc1
	Isc Bind 9.7.0 Rc2	cpe:2.3:a:isc:bind:9.7.0:rc2
	Isc Bind 9.7.1	cpe:2.3:a:isc:bind:9.7.1
	Isc Bind 9.7.1 P1	cpe:2.3:a:isc:bind:9.7.1:p1
	Isc Bind 9.7.1 P2	cpe:2.3:a:isc:bind:9.7.1:p2
	Isc Bind 9.7.1 Rc1	cpe:2.3:a:isc:bind:9.7.1:rc1
	Isc Bind 9.7.2	cpe:2.3:a:isc:bind:9.7.2
	Isc Bind 9.7.2 P1	cpe:2.3:a:isc:bind:9.7.2:p1
	Isc Bind 9.7.2 P2	cpe:2.3:a:isc:bind:9.7.2:p2
	Isc Bind 9.7.2 P3	cpe:2.3:a:isc:bind:9.7.2:p3
	Isc Bind 9.7.2 Rc1	cpe:2.3:a:isc:bind:9.7.2:rc1
	Isc Bind 9.7.3	cpe:2.3:a:isc:bind:9.7.3
	Isc Bind 9.7.3 B1	cpe:2.3:a:isc:bind:9.7.3:b1
	Isc Bind 9.7.3 P1	cpe:2.3:a:isc:bind:9.7.3:p1
	Isc Bind 9.7.3 Rc1	cpe:2.3:a:isc:bind:9.7.3:rc1
	Isc Bind 9.7.4	cpe:2.3:a:isc:bind:9.7.4
	Isc Bind 9.7.4 B1	cpe:2.3:a:isc:bind:9.7.4:b1
	Isc Bind 9.7.4 P1	cpe:2.3:a:isc:bind:9.7.4:p1
	Isc Bind 9.7.4 Rc1	cpe:2.3:a:isc:bind:9.7.4:rc1
	Isc Bind 9.7.5	cpe:2.3:a:isc:bind:9.7.5
	Isc Bind 9.7.5 B1	cpe:2.3:a:isc:bind:9.7.5:b1
	Isc Bind 9.7.5 Rc1	cpe:2.3:a:isc:bind:9.7.5:rc1
	Isc Bind 9.7.5 Rc2	cpe:2.3:a:isc:bind:9.7.5:rc2
	Isc Bind 9.7.6	cpe:2.3:a:isc:bind:9.7.6
	Isc Bind 9.7.6 P1	cpe:2.3:a:isc:bind:9.7.6:p1
	Isc Bind 9.7.6 P2	cpe:2.3:a:isc:bind:9.7.6:p2
	Isc Bind 9.7.7	cpe:2.3:a:isc:bind:9.7.7

Configuration #2

		CPE23	From	Up To
	Suse Linux Enterprise Software Development Kit 11.0 SP2	cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp2
	Suse Linux Enterprise Software Development Kit 11.0 SP3	cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3
	Novell Suse Linux 11 Desktop Edition	cpe:2.3:o:novell:suse_linux:11:*:desktop
	Novell Suse Linux 11 Server Edition	cpe:2.3:o:novell:suse_linux:11:*:server

Configuration #3

		CPE23	From	Up To
	Isc Dnsco Bind 9.9.3 S1	cpe:2.3:a:isc:dnsco_bind:9.9.3:s1
	Isc Dnsco Bind 9.9.4 S1b1	cpe:2.3:a:isc:dnsco_bind:9.9.4:s1b1

Configuration #4

		CPE23	From	Up To
	Opensuse 11.4	cpe:2.3:o:opensuse:opensuse:11.4

Configuration #5

		CPE23	From	Up To
	Isc Bind 9.9.0	cpe:2.3:a:isc:bind:9.9.0
	Isc Bind 9.9.0 A1	cpe:2.3:a:isc:bind:9.9.0:a1
	Isc Bind 9.9.0 A2	cpe:2.3:a:isc:bind:9.9.0:a2
	Isc Bind 9.9.0 A3	cpe:2.3:a:isc:bind:9.9.0:a3
	Isc Bind 9.9.0 B1	cpe:2.3:a:isc:bind:9.9.0:b1
	Isc Bind 9.9.0 B2	cpe:2.3:a:isc:bind:9.9.0:b2
	Isc Bind 9.9.0 Rc1	cpe:2.3:a:isc:bind:9.9.0:rc1
	Isc Bind 9.9.0 Rc2	cpe:2.3:a:isc:bind:9.9.0:rc2
	Isc Bind 9.9.0 Rc3	cpe:2.3:a:isc:bind:9.9.0:rc3
	Isc Bind 9.9.0 Rc4	cpe:2.3:a:isc:bind:9.9.0:rc4
	Isc Bind 9.9.1	cpe:2.3:a:isc:bind:9.9.1
	Isc Bind 9.9.1 P1	cpe:2.3:a:isc:bind:9.9.1:p1
	Isc Bind 9.9.1 P2	cpe:2.3:a:isc:bind:9.9.1:p2
	Isc Bind 9.9.2	cpe:2.3:a:isc:bind:9.9.2
	Isc Bind 9.9.3	cpe:2.3:a:isc:bind:9.9.3
	Isc Bind 9.9.3 B1	cpe:2.3:a:isc:bind:9.9.3:b1
	Isc Bind 9.9.3 B2	cpe:2.3:a:isc:bind:9.9.3:b2
	Isc Bind 9.9.3 P1	cpe:2.3:a:isc:bind:9.9.3:p1
	Isc Bind 9.9.3 Rc1	cpe:2.3:a:isc:bind:9.9.3:rc1
	Isc Bind 9.9.3 Rc2	cpe:2.3:a:isc:bind:9.9.3:rc2

Configuration #6

		CPE23	From	Up To
	Freebsd 8.0	cpe:2.3:o:freebsd:freebsd:8.0
	Freebsd 8.1	cpe:2.3:o:freebsd:freebsd:8.1
	Freebsd 8.2	cpe:2.3:o:freebsd:freebsd:8.2
	Freebsd 8.3	cpe:2.3:o:freebsd:freebsd:8.3
	Freebsd 8.4	cpe:2.3:o:freebsd:freebsd:8.4
	Freebsd 9.0	cpe:2.3:o:freebsd:freebsd:9.0
	Freebsd 9.1	cpe:2.3:o:freebsd:freebsd:9.1
	Freebsd 9.1 P4	cpe:2.3:o:freebsd:freebsd:9.1:p4
	Freebsd 9.1 P5	cpe:2.3:o:freebsd:freebsd:9.1:p5
	Freebsd 9.2 Prerelease	cpe:2.3:o:freebsd:freebsd:9.2:prerelease
	Freebsd 9.2 Rc1	cpe:2.3:o:freebsd:freebsd:9.2:rc1
	Freebsd 9.2 Rc2	cpe:2.3:o:freebsd:freebsd:9.2:rc2

Configuration #7

		CPE23	From	Up To
	Mandriva Business Server 1.0	cpe:2.3:o:mandriva:business_server:1.0
	Mandriva Enterprise Server 5.0	cpe:2.3:o:mandriva:enterprise_server:5.0

Configuration #8

		CPE23	From	Up To
	Redhat Enterprise Linux 5	cpe:2.3:o:redhat:enterprise_linux:5
	Redhat Enterprise Linux 6.0	cpe:2.3:o:redhat:enterprise_linux:6.0

Configuration #9

		CPE23	From	Up To
	Isc Bind 9.8.0	cpe:2.3:a:isc:bind:9.8.0
	Isc Bind 9.8.0 A1	cpe:2.3:a:isc:bind:9.8.0:a1
	Isc Bind 9.8.0 B1	cpe:2.3:a:isc:bind:9.8.0:b1
	Isc Bind 9.8.0 P1	cpe:2.3:a:isc:bind:9.8.0:p1
	Isc Bind 9.8.0 P2	cpe:2.3:a:isc:bind:9.8.0:p2
	Isc Bind 9.8.0 P4	cpe:2.3:a:isc:bind:9.8.0:p4
	Isc Bind 9.8.0 Rc1	cpe:2.3:a:isc:bind:9.8.0:rc1
	Isc Bind 9.8.1	cpe:2.3:a:isc:bind:9.8.1
	Isc Bind 9.8.1 B1	cpe:2.3:a:isc:bind:9.8.1:b1
	Isc Bind 9.8.1 B2	cpe:2.3:a:isc:bind:9.8.1:b2
	Isc Bind 9.8.1 B3	cpe:2.3:a:isc:bind:9.8.1:b3
	Isc Bind 9.8.1 P1	cpe:2.3:a:isc:bind:9.8.1:p1
	Isc Bind 9.8.1 Rc1	cpe:2.3:a:isc:bind:9.8.1:rc1
	Isc Bind 9.8.2 B1	cpe:2.3:a:isc:bind:9.8.2:b1
	Isc Bind 9.8.2 Rc1	cpe:2.3:a:isc:bind:9.8.2:rc1
	Isc Bind 9.8.2 Rc2	cpe:2.3:a:isc:bind:9.8.2:rc2
	Isc Bind 9.8.3	cpe:2.3:a:isc:bind:9.8.3
	Isc Bind 9.8.3 P1	cpe:2.3:a:isc:bind:9.8.3:p1
	Isc Bind 9.8.3 P2	cpe:2.3:a:isc:bind:9.8.3:p2
	Isc Bind 9.8.4	cpe:2.3:a:isc:bind:9.8.4
	Isc Bind 9.8.5	cpe:2.3:a:isc:bind:9.8.5
	Isc Bind 9.8.5 B1	cpe:2.3:a:isc:bind:9.8.5:b1
	Isc Bind 9.8.5 B2	cpe:2.3:a:isc:bind:9.8.5:b2
	Isc Bind 9.8.5 P1	cpe:2.3:a:isc:bind:9.8.5:p1
	Isc Bind 9.8.5 Rc1	cpe:2.3:a:isc:bind:9.8.5:rc1
	Isc Bind 9.8.5 Rc2	cpe:2.3:a:isc:bind:9.8.5:rc2
	Isc Bind 9.8.6 B1	cpe:2.3:a:isc:bind:9.8.6:b1

Configuration #10

		CPE23	From	Up To
	Fedoraproject Fedora 18	cpe:2.3:o:fedoraproject:fedora:18
	Fedoraproject Fedora 19	cpe:2.3:o:fedoraproject:fedora:19

Configuration #11

		CPE23	From	Up To
	Hp-ux B.11.31	cpe:2.3:o:hp:hp-ux:b.11.31

Configuration #12

		CPE23	From	Up To
	Slackware Linux 12.1	cpe:2.3:o:slackware:slackware_linux:12.1
	Slackware Linux 12.2	cpe:2.3:o:slackware:slackware_linux:12.2
	Slackware Linux 13.0	cpe:2.3:o:slackware:slackware_linux:13.0
	Slackware Linux 13.1	cpe:2.3:o:slackware:slackware_linux:13.1
	Slackware Linux 13.37	cpe:2.3:o:slackware:slackware_linux:13.37