NVD

Id
40373  
Name
CVE-2013-4854  
Description
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-07-29  
Modified Date
2017-01-06  
Seq
2013-4854  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204999 40373 CVE-2013-4854 20130806 [slackware-security] bind (SSA:2013-218-01)  View
205000 40373 CVE-2013-4854 APPLE-SA-2014-10-16-3  View
205001 40373 CVE-2013-4854 http://linux.oracle.com/errata/ELSA-2014-1244  View
205002 40373 CVE-2013-4854 FEDORA-2013-13863  View
205003 40373 CVE-2013-4854 FEDORA-2013-13831  View
205004 40373 CVE-2013-4854 SUSE-SU-2013:1310  View
205005 40373 CVE-2013-4854 openSUSE-SU-2013:1354  View
205006 40373 CVE-2013-4854 oval:org.mitre.oval:def:19561  View
205007 40373 CVE-2013-4854 RHSA-2013:1114  View
205008 40373 CVE-2013-4854 RHSA-2013:1115  View
205009 40373 CVE-2013-4854 FreeBSD-SA-13:07  View
205010 40373 CVE-2013-4854 MDVSA-2013:202  View
205011 40373 CVE-2013-4854 61479  View
205012 40373 CVE-2013-4854 1028838  View
205013 40373 CVE-2013-4854 http://www.zerodayinitiative.com/advisories/ZDI-13-210/  View
205014 40373 CVE-2013-4854 isc-bind-cve20134854-dos(86004)  View
205015 40373 CVE-2013-4854 HPSBUX02926  View
205016 40373 CVE-2013-4854 https://kb.isc.org/article/AA-01015  View
205017 40373 CVE-2013-4854 https://kb.isc.org/article/AA-01016  View
205018 40373 CVE-2013-4854 https://kc.mcafee.com/corporate/index?page=content&id=SB10052  View
205019 40373 CVE-2013-4854 https://support.apple.com/kb/HT6536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21940 JVNDB-2013-003515 ISC BIND および DNSco BIND の rdata.c の RFC 5011 の実装におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND および DNSco BIND の rdata.c の RFC 5011 の実装には、サービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4854 64796 CVE-2013-4854 40373 7.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003515.html 2013-07-26 2014-11-05 View