Vulnerability in FreeBSD
CVE-2013-4854
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.8 (High). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.342 (98.4th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.342 · newest: 0.342 · change: 0.000
Affected products
- FreeBSD — versions 8.0, 8.1, 8.2
- HP Hp-Ux — versions b.11.31
- Isc Bind — versions 9.7.0, 9.7.1, 9.7.2
- Isc Dnsco Bind — versions 9.9.3, 9.9.4
- Mandriva Business Server — versions 1.0
- Mandriva Enterprise Server — versions 5.0
- Novell SUSE Linux — versions 11
- Slackware Linux — versions 12.1, 12.2, 13.0
- Fedoraproject Fedora — versions 18, 19
- openSUSE — versions 11.4
Public proof-of-concept exploits
References
- lists.fedoraproject.org/pipermail/package-announce/2013-August/113108.html (vendor-advisory, Vendor Advisory)
- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay (Vendor Advisory, vendor-advisory)
- kb.isc.org/article/AA-01015 (Vendor Advisory)
- archives.neohapsis.com/archives/bugtraq/2014-10/0103.html (vendor-advisory)
- secunia.com/advisories/54134 (Vendor Advisory, third-party-advisory)
- www.mandriva.com/security/advisories (vendor-advisory, Vendor Advisory)
- linux.oracle.com/errata/ELSA-2014-1244
- secunia.com/advisories/54185 (Vendor Advisory, third-party-advisory)
- www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc (vendor-advisory, Vendor Advisory)
- kb.isc.org/article/AA-01016 (Vendor Advisory)
Frequently asked questions
- What is CVE-2013-4854?
- CVE-2013-4854 is a vulnerability in FreeBSD. Published 2013-07-29.
- Is CVE-2013-4854 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.