CVE-2013-4854
Fixed in a distro release EPSS 34%
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Products: isc bind, suse_linux_enterprise_software_development_kit, novell suse_linux, isc dnsco_bind, opensuse, freebsd, mandriva business_server, mandriva enterprise_server, redhat enterprise_linux, fedoraproject fedora, hp-ux, slackware_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bind9 | 1:9.8.4.dfsg.P1-6+nmu3 |
| Debian 13 | bind9 | 1:9.8.4.dfsg.P1-6+nmu3 |
| Debian 14 | bind9 | 1:9.8.4.dfsg.P1-6+nmu3 |
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze11 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u1 |
| Red Hat Enterprise Linux 5 | bind97 | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 5 | bind97-chroot | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 5 | bind97-debuginfo | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 5 | bind97-devel | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 5 | bind97-libs | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 5 | bind97-utils | 32:9.7.0-17.P2.el5_9.2 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.17.rc1.el6_4.5 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.17.rc1.el6_4.5 |
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 |