Vulnerability in Freebsd
CVE-2013-4854
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of servic…
EPSS: 0.342 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 8.0, 8.1, 8.2
- Hp Hp-ux — versions b.11.31
- Isc Bind — versions 9.7.0, 9.7.1, 9.7.2
- Isc Dnsco_bind — versions 9.9.3, 9.9.4
- Mandriva Business_server — versions 1.0
- Mandriva Enterprise_server — versions 5.0
- Novell Suse_linux — versions 11
- Slackware Slackware_linux — versions 12.1, 12.2, 13.0
- Fedoraproject Fedora — versions 18, 19
- Opensuse — versions 11.4
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, x_refsource_HP, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2013-4854?
- CVE-2013-4854 is a vulnerability in Freebsd. Published 2013-07-29.
- Is CVE-2013-4854 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.