CVE-2013-4854
- State
- Published
- Severity
- Not scored
- Published
- Jul 26, 2013
- Updated
- Aug 6, 2024
- Reserved
- Jul 16, 2013
Description
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2013-13863vendor-advisory
- HPSBUX02926vendor-advisory
- https://kb.isc.org/article/AA-01015
- APPLE-SA-2014-10-16-3vendor-advisory
- 54134third-party-advisory
- MDVSA-2013:202vendor-advisory
- http://linux.oracle.com/errata/ELSA-2014-1244
- 54185third-party-advisory
- FreeBSD-SA-13:07vendor-advisory
- https://kb.isc.org/article/AA-01016
- oval:org.mitre.oval:def:19561vdb-entrysignature
- https://kc.mcafee.com/corporate/index?page=content&id=SB10052
- FEDORA-2013-13831vendor-advisory
- 54207third-party-advisory
- openSUSE-SU-2013:1354vendor-advisory
- https://support.apple.com/kb/HT6536
- isc-bind-cve20134854-dos(86004)vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-13-210/
- 20130806 [slackware-security] bind (SSA:2013-218-01)mailing-list
- RHSA-2013:1114vendor-advisory
- 61479vdb-entry
- 54323third-party-advisory
- SUSE-SU-2013:1310vendor-advisory
- 54211third-party-advisory
- USN-1910-1vendor-advisory
- DSA-2728vendor-advisory
- 1028838vdb-entry
- RHSA-2013:1115vendor-advisory
- 54432third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.