Approved changes feed: RSS · Atom

cpe:2.3:a:isc:dnsco_bind:9.9.4:s1b1:*:*:*:*:*:*

part: a version: 9.9.4 update: s1b1

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductDnsco Bind (cfda6e75-d6f4-5abe-8764-203eccfae977)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.622026

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4854 vulnerable 2026-06-03 14:33:19.797009 Details available
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Published: 2013-07-26T23:00:00.000Z
Updated: 2024-08-06T16:59:39.290Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.