CVE-2013-4854

Published: Jul 29, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Affected (108)

Products: Isc: Bind, Dnsco Bind · Novell: Suse Linux · Suse: Suse Linux Enterprise Software Development Kit · +7 more

Show all products

Isc: Bind, Dnsco Bind · Novell: Suse Linux · Suse: Suse Linux Enterprise Software Development Kit · Opensuse: Opensuse · Freebsd: Freebsd · Mandriva: Business Server, Enterprise Server · Redhat: Enterprise Linux · Fedoraproject: Fedora · Hp: Hp Ux · Slackware: Slackware Linux

2 products

1 product

1 product

Suse Linux Enterprise Software Development Kit

1 product

1 product

2 products

1 product

1 product

1 product

1 product

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.7.0
Isc Bind	Version 9.7.0 b1
Isc Bind	Version 9.7.0 p1
Isc Bind	Version 9.7.0 p2
Isc Bind	Version 9.7.0 rc1
Isc Bind	Version 9.7.0 rc2
Isc Bind	Version 9.7.1
Isc Bind	Version 9.7.1 p1
Isc Bind	Version 9.7.1 p2
Isc Bind	Version 9.7.1 rc1
Isc Bind	Version 9.7.2
Isc Bind	Version 9.7.2 p1
Isc Bind	Version 9.7.2 p2
Isc Bind	Version 9.7.2 p3
Isc Bind	Version 9.7.2 rc1
Isc Bind	Version 9.7.3
Isc Bind	Version 9.7.3 b1
Isc Bind	Version 9.7.3 p1
Isc Bind	Version 9.7.3 rc1
Isc Bind	Version 9.7.4
Isc Bind	Version 9.7.4 b1
Isc Bind	Version 9.7.4 p1
Isc Bind	Version 9.7.4 rc1
Isc Bind	Version 9.7.5
Isc Bind	Version 9.7.5 b1
Isc Bind	Version 9.7.5 rc1
Isc Bind	Version 9.7.5 rc2
Isc Bind	Version 9.7.6
Isc Bind	Version 9.7.6 p1
Isc Bind	Version 9.7.6 p2
Isc Bind	Version 9.7.7

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Novell Suse Linux	Version 11
Suse Suse Linux Enterprise Software Development Kit	Version 11.0 sp2
Suse Suse Linux Enterprise Software Development Kit	Version 11.0 sp3

Running on/with	Platform Versions
Novell Suse Linux	Version 11

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Isc Dnsco Bind	Version 9.9.3 s1
Isc Dnsco Bind	Version 9.9.4 s1b1

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4

Configuration E

20 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.9.0
Isc Bind	Version 9.9.0 a1
Isc Bind	Version 9.9.0 a2
Isc Bind	Version 9.9.0 a3
Isc Bind	Version 9.9.0 b1
Isc Bind	Version 9.9.0 b2
Isc Bind	Version 9.9.0 rc1
Isc Bind	Version 9.9.0 rc2
Isc Bind	Version 9.9.0 rc3
Isc Bind	Version 9.9.0 rc4
Isc Bind	Version 9.9.1
Isc Bind	Version 9.9.1 p1
Isc Bind	Version 9.9.1 p2
Isc Bind	Version 9.9.2
Isc Bind	Version 9.9.3
Isc Bind	Version 9.9.3 b1
Isc Bind	Version 9.9.3 b2
Isc Bind	Version 9.9.3 p1
Isc Bind	Version 9.9.3 rc1
Isc Bind	Version 9.9.3 rc2

Configuration F

12 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 8.0
Freebsd Freebsd	Version 8.1
Freebsd Freebsd	Version 8.2
Freebsd Freebsd	Version 8.3
Freebsd Freebsd	Version 8.4
Freebsd Freebsd	Version 9.0
Freebsd Freebsd	Version 9.1
Freebsd Freebsd	Version 9.1 p4
Freebsd Freebsd	Version 9.1 p5
Freebsd Freebsd	Version 9.2 prerelease
Freebsd Freebsd	Version 9.2 rc1
Freebsd Freebsd	Version 9.2 rc2

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Mandriva Business Server	Version 1.0
Mandriva Enterprise Server	Version 5.0

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0

Configuration I

27 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.8.0
Isc Bind	Version 9.8.0 a1
Isc Bind	Version 9.8.0 b1
Isc Bind	Version 9.8.0 p1
Isc Bind	Version 9.8.0 p2
Isc Bind	Version 9.8.0 p4
Isc Bind	Version 9.8.0 rc1
Isc Bind	Version 9.8.1
Isc Bind	Version 9.8.1 b1
Isc Bind	Version 9.8.1 b2
Isc Bind	Version 9.8.1 b3
Isc Bind	Version 9.8.1 p1
Isc Bind	Version 9.8.1 rc1
Isc Bind	Version 9.8.2 b1
Isc Bind	Version 9.8.2 rc1
Isc Bind	Version 9.8.2 rc2
Isc Bind	Version 9.8.3
Isc Bind	Version 9.8.3 p1
Isc Bind	Version 9.8.3 p2
Isc Bind	Version 9.8.4
Isc Bind	Version 9.8.5
Isc Bind	Version 9.8.5 b1
Isc Bind	Version 9.8.5 b2
Isc Bind	Version 9.8.5 p1
Isc Bind	Version 9.8.5 rc1
Isc Bind	Version 9.8.5 rc2
Isc Bind	Version 9.8.6 b1

Configuration J

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 18
Fedoraproject Fedora	Version 19

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Hp Hp Ux	Version b.11.31

Configuration L

5 vulnerable

Vulnerable Software	Affected Versions
Slackware Slackware Linux	Version 12.1
Slackware Slackware Linux	Version 12.2
Slackware Slackware Linux	Version 13.0
Slackware Slackware Linux	Version 13.1
Slackware Slackware Linux	Version 13.37

References (58)

http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html

Source: cve@mitre.org

http://linux.oracle.com/errata/ELSA-2014-1244

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113108.html

Source: cve@mitre.org

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113251.html

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html

Source: cve@mitre.org

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-1114.html

Source: cve@mitre.org

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-1115.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54134

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54185

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54207

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54211

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54323

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54432

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2013/dsa-2728

Source: cve@mitre.org

http://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc

Source: cve@mitre.org

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:202

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/61479

Source: cve@mitre.org

http://www.securitytracker.com/id/1028838

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1910-1

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-13-210/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/86004

Source: cve@mitre.org

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03922396

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01015

Source: cve@mitre.org

Vendor Advisory

https://kb.isc.org/article/AA-01016

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10052

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19561

Source: cve@mitre.org

https://support.apple.com/kb/HT6536

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html