Vulnerability in Freebsd
CVE-2013-4854
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of servic…
EPSS: 0.511 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 8.0, 8.1, 8.2
- Hp Hp-ux — versions b.11.31
- Isc Bind — versions 9.7.0, 9.7.1, 9.7.2
- Isc Dnsco_bind — versions 9.9.3, 9.9.4
- Mandriva Business_server — versions 1.0
- Mandriva Enterprise_server — versions 5.0
- Novell Suse_linux — versions 11
- Slackware Slackware_linux — versions 12.1, 12.2, 13.0
- Fedoraproject Fedora — versions 18, 19
- Opensuse — versions 11.4
Public proof-of-concept exploits
References
- FEDORA-2013-13863 (x_refsource_FEDORA, vendor-advisory, Vendor Advisory)
- HPSBUX02926 (Vendor Advisory, x_refsource_HP, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- APPLE-SA-2014-10-16-3 (vendor-advisory, x_refsource_APPLE)
- 54134 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- MDVSA-2013:202 (vendor-advisory, x_refsource_MANDRIVA, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- 54185 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- FreeBSD-SA-13:07 (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2013-4854?
- CVE-2013-4854 is a vulnerability in Freebsd. Published 2013-07-29.
- Is CVE-2013-4854 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.