Debian Security Bug TrackerDEBIANCVE:CVE-2013-4854CVE-2013-4854
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.955 High
EPSS
Percentile
99.4%
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bind9 | <Β 1:9.8.4.dfsg.P1-6+nmu3 | bind9_1:9.8.4.dfsg.P1-6+nmu3_all.deb |
| Debian | 11 | all | bind9 | <Β 1:9.8.4.dfsg.P1-6+nmu3 | bind9_1:9.8.4.dfsg.P1-6+nmu3_all.deb |
| Debian | 10 | all | bind9 | <Β 1:9.8.4.dfsg.P1-6+nmu3 | bind9_1:9.8.4.dfsg.P1-6+nmu3_all.deb |
| Debian | 999 | all | bind9 | <Β 1:9.8.4.dfsg.P1-6+nmu3 | bind9_1:9.8.4.dfsg.P1-6+nmu3_all.deb |
| Debian | 13 | all | bind9 | <Β 1:9.8.4.dfsg.P1-6+nmu3 | bind9_1:9.8.4.dfsg.P1-6+nmu3_all.deb |
Related
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.955 High
EPSS
Percentile
99.4%