CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4854

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.707

EPSS Ranking 98.6%

CVSS Severity

CVSS v2 Score 7.8

References

Products affected by CVE-2013-4854

Isc » Bind » Version: 9.7.0

cpe:2.3:a:isc:bind:9.7.0
Isc » Bind » Version: 9.7.1

cpe:2.3:a:isc:bind:9.7.1
Isc » Bind » Version: 9.7.2

cpe:2.3:a:isc:bind:9.7.2
Isc » Bind » Version: 9.7.3

cpe:2.3:a:isc:bind:9.7.3
Isc » Bind » Version: 9.7.4

cpe:2.3:a:isc:bind:9.7.4
Isc » Bind » Version: 9.7.5

cpe:2.3:a:isc:bind:9.7.5
Isc » Bind » Version: 9.7.6

cpe:2.3:a:isc:bind:9.7.6
Isc » Bind » Version: 9.7.7

cpe:2.3:a:isc:bind:9.7.7
Isc » Bind » Version: 9.8.0

cpe:2.3:a:isc:bind:9.8.0
Isc » Bind » Version: 9.8.1

cpe:2.3:a:isc:bind:9.8.1
Isc » Bind » Version: 9.8.2

cpe:2.3:a:isc:bind:9.8.2
Isc » Bind » Version: 9.8.3

cpe:2.3:a:isc:bind:9.8.3
Isc » Bind » Version: 9.8.4

cpe:2.3:a:isc:bind:9.8.4
Isc » Bind » Version: 9.8.5

cpe:2.3:a:isc:bind:9.8.5
Isc » Bind » Version: 9.8.6

cpe:2.3:a:isc:bind:9.8.6
Isc » Bind » Version: 9.9.0

cpe:2.3:a:isc:bind:9.9.0
Isc » Bind » Version: 9.9.1

cpe:2.3:a:isc:bind:9.9.1
Isc » Bind » Version: 9.9.2

cpe:2.3:a:isc:bind:9.9.2
Isc » Bind » Version: 9.9.3

cpe:2.3:a:isc:bind:9.9.3
Isc » Dnsco Bind » Version: 9.9.3

cpe:2.3:a:isc:dnsco_bind:9.9.3
Isc » Dnsco Bind » Version: 9.9.4

cpe:2.3:a:isc:dnsco_bind:9.9.4
Suse » Suse Linux Enterprise Software Development Kit » Version: 11.0

cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0
Fedoraproject » Fedora » Version: 18

cpe:2.3:o:fedoraproject:fedora:18
Fedoraproject » Fedora » Version: 19

cpe:2.3:o:fedoraproject:fedora:19
Freebsd » Freebsd » Version: 8.0

cpe:2.3:o:freebsd:freebsd:8.0
Freebsd » Freebsd » Version: 8.1

cpe:2.3:o:freebsd:freebsd:8.1
Freebsd » Freebsd » Version: 8.2

cpe:2.3:o:freebsd:freebsd:8.2
Freebsd » Freebsd » Version: 8.3

cpe:2.3:o:freebsd:freebsd:8.3
Freebsd » Freebsd » Version: 8.4

cpe:2.3:o:freebsd:freebsd:8.4
Freebsd » Freebsd » Version: 9.0

cpe:2.3:o:freebsd:freebsd:9.0
Freebsd » Freebsd » Version: 9.1

cpe:2.3:o:freebsd:freebsd:9.1
Freebsd » Freebsd » Version: 9.2

cpe:2.3:o:freebsd:freebsd:9.2
Hp » Hp-Ux » Version: b.11.31

cpe:2.3:o:hp:hp-ux:b.11.31
Mandriva » Business Server » Version: 1.0

cpe:2.3:o:mandriva:business_server:1.0
Mandriva » Enterprise Server » Version: 5.0

cpe:2.3:o:mandriva:enterprise_server:5.0
Novell » Suse Linux » Version: 11

cpe:2.3:o:novell:suse_linux:11
Opensuse » Opensuse » Version: 11.4

cpe:2.3:o:opensuse:opensuse:11.4
Redhat » Enterprise Linux » Version: 5

cpe:2.3:o:redhat:enterprise_linux:5
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Slackware » Slackware Linux » Version: 12.1

cpe:2.3:o:slackware:slackware_linux:12.1
Slackware » Slackware Linux » Version: 12.2

cpe:2.3:o:slackware:slackware_linux:12.2
Slackware » Slackware Linux » Version: 13.0

cpe:2.3:o:slackware:slackware_linux:13.0
Slackware » Slackware Linux » Version: 13.1

cpe:2.3:o:slackware:slackware_linux:13.1
Slackware » Slackware Linux » Version: 13.37

cpe:2.3:o:slackware:slackware_linux:13.37

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4854

Products

Pricing

Contact Us