CVE-2013-4854

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 34.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-29 · updated 2026-06-16

Description

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Affected products

Fedoraproject Fedora: 18, 19
FreeBSD: 8.0, 8.1, 8.2, 8.3, 8.4, 9.0 (+6)
Hewlett Packard Enterprise (HPE) HP-UX: b.11.31
ISC BIND: 9.7.0, 9.7.0-b1, 9.7.0-p1, 9.7.0-p2, 9.7.0-rc1, 9.7.0-rc2 (+72)
ISC Dnsco Bind: 9.9.3-s1, 9.9.4-s1b1
Mandriva Business Server: 1.0
Mandriva Enterprise Server: 5.0
Novell Suse Linux: 11
Opensuse: 11.4
Red Hat Enterprise Linux: 5, 6.0
Slackware Linux: 12.1, 12.2, 13.0, 13.1, 13.37
Suse Linux Enterprise Software Development Kit: 11.0-sp2, 11.0-sp3

References

Get alerted when CVE-2013-4854 or the next vulnerability affects your stack