CVE-2013-4854: High severity isc bind 9 vulnerability
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4854?
CVE-2013-4854 has a high severity rating due to its potential to cause denial of service.
How do I fix CVE-2013-4854?
To fix CVE-2013-4854, update ISC BIND to version 9.8.5-P2 or later, or apply the relevant patches.
What versions of ISC BIND are affected by CVE-2013-4854?
CVE-2013-4854 affects ISC BIND versions 9.7.x and 9.8.x before 9.8.5-P2, as well as certain 9.9.x versions prior to 9.9.3-P2.
Is it possible to exploit CVE-2013-4854 remotely?
Yes, CVE-2013-4854 can be exploited remotely through specially crafted queries.
What type of vulnerability is CVE-2013-4854 classified as?
CVE-2013-4854 is classified as a denial of service vulnerability.