7.8 - CVE-2013-4854

Executive Summary

Informations
Name	CVE-2013-4854	First vendor Publication	2013-07-29
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18438

Oval ID:	oval:org.mitre.oval:def:18438
Title:	USN-1910-1 -- bind9 vulnerability
Description:	Bind could be made to crash if it received specially crafted network traffic.
Family:	unix	Class:	patch
Reference(s):	USN-1910-1 CVE-2013-4854	Version:	5
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04	Product(s):	bind9
Definition Synopsis:
Release section Ubuntu 13.04 is installed Packages match section bind9 DPKG is earlier than 1:9.9.2.dfsg.P1-2ubuntu2.1 AND libdns95 DPKG is earlier than 1:9.9.2.dfsg.P1-2ubuntu2.1 AND Release section Ubuntu 12.10 is installed Packages match section bind9 DPKG is earlier than 1:9.8.1.dfsg.P1-4.2ubuntu3.3 AND libdns81 DPKG is earlier than 1:9.8.1.dfsg.P1-4.2ubuntu3.3 AND Release section Ubuntu 12.04 is installed Packages match section bind9 DPKG is earlier than 1:9.8.1.dfsg.P1-4ubuntu0.7 AND libdns81 DPKG is earlier than 1:9.8.1.dfsg.P1-4ubuntu0.7 AND Release section Ubuntu 10.04 is installed Packages match section bind9 DPKG is earlier than 1:9.7.0.dfsg.P1-1ubuntu0.10 AND libdns64 DPKG is earlier than 1:9.7.0.dfsg.P1-1ubuntu0.10

Definition Id: oval:org.mitre.oval:def:18633

Oval ID:	oval:org.mitre.oval:def:18633
Title:	DSA-2728-1 bind9 - denial of service
Description:	Maxim Shudrak and the HP Zero Day Initiative reported a denial of service vulnerability in BIND, a DNS server. A specially crafted query that includes malformed rdata can cause named daemon to terminate with an assertion failure while rejecting the malformed query.
Family:	unix	Class:	patch
Reference(s):	DSA-2728-1 CVE-2013-4854	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	bind9
Definition Synopsis:
Release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND bind9 DPKG is earlier than 1:9.7.3.dfsg-1~squeeze11 AND Release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND bind9 DPKG is earlier than 1:9.8.4.dfsg.P1-6+nmu2+deb7u1

Definition Id: oval:org.mitre.oval:def:19561

Oval ID:	oval:org.mitre.oval:def:19561
Title:	HP-UX Running BIND, Remote Denial of Service (DoS)
Description:	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-4854	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
HP-UX B.11.31 AND filesets tests NameService.BIND-AUX version is less than C.9.7.3.3.0 AND NameService.BIND-RUN version is less than C.9.7.3.3.0

Definition Id: oval:org.mitre.oval:def:20276

Oval ID:	oval:org.mitre.oval:def:20276
Title:	RHSA-2013:1115: bind97 security update (Important)
Description:	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1115-00 CESA-2013:1115 CVE-2013-4854	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	bind97
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section bind97-utils is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-chroot is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97 is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-libs is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-devel is earlier than 32:9.7.0-17.P2.el5_9.2

Definition Id: oval:org.mitre.oval:def:21228

Oval ID:	oval:org.mitre.oval:def:21228
Title:	RHSA-2013:1114: bind security update (Important)
Description:	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1114-00 CESA-2013:1114 CVE-2013-4854	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	bind
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section bind-utils is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-chroot is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-devel is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-sdb is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-libs is earlier than 32:9.8.2-0.17.rc1.el6_4.5

Definition Id: oval:org.mitre.oval:def:22902

Oval ID:	oval:org.mitre.oval:def:22902
Title:	ELSA-2013:1115: bind97 security update (Important)
Description:	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1115-00 CVE-2013-4854	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	bind97
Definition Synopsis:
Oracle Linux 5.x rpm test bind97-utils is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-chroot is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97 is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-libs is earlier than 32:9.7.0-17.P2.el5_9.2 AND bind97-devel is earlier than 32:9.7.0-17.P2.el5_9.2

Definition Id: oval:org.mitre.oval:def:23869

Oval ID:	oval:org.mitre.oval:def:23869
Title:	ELSA-2013:1114: bind security update (Important)
Description:	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1114-00 CVE-2013-4854	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	bind
Definition Synopsis:
Oracle Linux 6.x rpm test bind-utils is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-chroot is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-devel is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-sdb is earlier than 32:9.8.2-0.17.rc1.el6_4.5 AND bind-libs is earlier than 32:9.8.2-0.17.rc1.el6_4.5

Definition Id: oval:org.mitre.oval:def:25076

Oval ID:	oval:org.mitre.oval:def:25076
Title:	SUSE-SU-2013:1310-1 -- Security update for bind
Description:	A specially crafted query with malicious rdata could have caused a crash (DoS) in named. Security Issue reference: * CVE-2013-4854 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854 >
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1310-1 CVE-2013-4854	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11	Product(s):	bind
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section bind RPM is earlier than 0:9.9.3P2-0.5.1 AND bind-chrootenv RPM is earlier than 0:9.9.3P2-0.5.1 AND bind-doc RPM is earlier than 0:9.9.3P2-0.5.1 AND SUSE Linux Enterprise Server 11 and SUSE Linux Enterprise Desktop 11 release section Operation system section SUSE Linux Enterprise Server 11.x is installed AND SUSE Linux Enterprise Desktop 11.x is installed Packages match section bind-libs RPM is earlier than 0:9.9.3P2-0.5.1 AND bind-utils RPM is earlier than 0:9.9.3P2-0.5.1 AND bind-libs-32bit RPM is earlier than 0:9.9.3P2-0.5.1

Definition Id: oval:org.mitre.oval:def:27039

Oval ID:	oval:org.mitre.oval:def:27039
Title:	DEPRECATED: ELSA-2013-1115 -- bind97 security update (important)
Description:	[32:9.7.0-17.P2.2] - fix for CVE-2013-4854
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1115 CVE-2013-4854	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	bind97
Definition Synopsis:
Oracle Linux 5.x Packages match section bind97 is earlier than 0:9.7.0-17.P2.el5_9.2 AND bind97-chroot is earlier than 0:9.7.0-17.P2.el5_9.2 AND bind97-devel is earlier than 0:9.7.0-17.P2.el5_9.2 AND bind97-libs is earlier than 0:9.7.0-17.P2.el5_9.2 AND bind97-utils is earlier than 0:9.7.0-17.P2.el5_9.2

Definition Id: oval:org.mitre.oval:def:27514

Oval ID:	oval:org.mitre.oval:def:27514
Title:	DEPRECATED: ELSA-2013-1114 -- bind security update (important)
Description:	[32:9.8.2-0.17.rc1.0.2.el6_4.5] - bump release and build for ULN [32:9.8.2-0.17.rc1.5] - fix CVE-2013-4854
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1114 CVE-2013-4854	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	bind
Definition Synopsis:
Oracle Linux 6.x Packages match section bind is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5 AND bind-chroot is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5 AND bind-devel is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5 AND bind-libs is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5 AND bind-sdb is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5 AND bind-utils is earlier than 0:9.8.2-0.17.rc1.0.2.el6_4.5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:2.3:a:isc:bind:9.9.3:b1:::::: cpe:2.3:a:isc:bind:9.9.3:::::::* cpe:2.3:a:isc:bind:9.9.3:rc2:::::: cpe:2.3:a:isc:bind:9.9.3:rc1:::::: cpe:2.3:a:isc:bind:9.9.3:p1:::::: cpe:2.3:a:isc:bind:9.9.3:b2:::::: cpe:2.3:a:isc:bind:9.9.2:::::::* cpe:2.3:a:isc:bind:9.9.1:::::::* cpe:2.3:a:isc:bind:9.9.1:p1:::::: cpe:2.3:a:isc:bind:9.9.1:p2:::::: cpe:2.3:a:isc:bind:9.9.0:a3:::::: cpe:2.3:a:isc:bind:9.9.0:a1:::::: cpe:2.3:a:isc:bind:9.9.0:a2:::::: cpe:2.3:a:isc:bind:9.9.0:rc3:::::: cpe:2.3:a:isc:bind:9.9.0:::::::* cpe:2.3:a:isc:bind:9.9.0:b1:::::: cpe:2.3:a:isc:bind:9.9.0:rc2:::::: cpe:2.3:a:isc:bind:9.9.0:b2:::::: cpe:2.3:a:isc:bind:9.9.0:rc1:::::: cpe:2.3:a:isc:bind:9.9.0:rc4:::::: cpe:2.3:a:isc:bind:9.8.6:b1:::-:::* cpe:2.3:a:isc:bind:9.8.5:b1:::-:::* cpe:2.3:a:isc:bind:9.8.5::::-::: cpe:2.3:a:isc:bind:9.8.5:b2:::-:::* cpe:2.3:a:isc:bind:9.8.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.8.5:p1:::-:::* cpe:2.3:a:isc:bind:9.8.5:rc2:::-:::* cpe:2.3:a:isc:bind:9.8.4::::-::: cpe:2.3:a:isc:bind:9.8.3::::-::: cpe:2.3:a:isc:bind:9.8.3:p2:::-:::* cpe:2.3:a:isc:bind:9.8.3:p1:::-:::* cpe:2.3:a:isc:bind:9.8.2:b1:::-:::* cpe:2.3:a:isc:bind:9.8.2:rc2:::-:::* cpe:2.3:a:isc:bind:9.8.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.8.1:b1:::-:::* cpe:2.3:a:isc:bind:9.8.1:b3:::-:::* cpe:2.3:a:isc:bind:9.8.1:b2:::-:::* cpe:2.3:a:isc:bind:9.8.1::::-::: cpe:2.3:a:isc:bind:9.8.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.8.1:p1:::-:::* cpe:2.3:a:isc:bind:9.8.0::::-::: cpe:2.3:a:isc:bind:9.8.0:p1:::-:::* cpe:2.3:a:isc:bind:9.8.0:p2:::-:::* cpe:2.3:a:isc:bind:9.8.0:b1:::-:::* cpe:2.3:a:isc:bind:9.8.0:a1:::-:::* cpe:2.3:a:isc:bind:9.8.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.8.0:p4:::-:::* cpe:2.3:a:isc:bind:9.7.7::::-::: cpe:2.3:a:isc:bind:9.7.6:p1:::-:::* cpe:2.3:a:isc:bind:9.7.6:p2:::-:::* cpe:2.3:a:isc:bind:9.7.6::::-::: cpe:2.3:a:isc:bind:9.7.5::::-::: cpe:2.3:a:isc:bind:9.7.5:rc2:::-:::* cpe:2.3:a:isc:bind:9.7.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.5:b1:::-:::* cpe:2.3:a:isc:bind:9.7.4::::-::: cpe:2.3:a:isc:bind:9.7.4:b1:::-:::* cpe:2.3:a:isc:bind:9.7.4:p1:::-:::* cpe:2.3:a:isc:bind:9.7.4:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.3::::-::: cpe:2.3:a:isc:bind:9.7.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.3:p1:::-:::* cpe:2.3:a:isc:bind:9.7.3:b1:::-:::* cpe:2.3:a:isc:bind:9.7.2::::-::: cpe:2.3:a:isc:bind:9.7.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.2:p3:::-:::* cpe:2.3:a:isc:bind:9.7.2:p1:::-:::* cpe:2.3:a:isc:bind:9.7.2:p2:::-:::* cpe:2.3:a:isc:bind:9.7.1::::-::: cpe:2.3:a:isc:bind:9.7.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.1:p1:::-:::* cpe:2.3:a:isc:bind:9.7.1:p2:::-:::* cpe:2.3:a:isc:bind:9.7.0:p1:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.0::::-::: cpe:2.3:a:isc:bind:9.7.0:p2:::-:::* cpe:2.3:a:isc:bind:9.7.0:b1:::-:::*	78
Application	Isc Dnsco Bind cpe:2.3:a:isc:dnsco_bind:9.9.4:s1b1:::::: cpe:2.3:a:isc:dnsco_bind:9.9.3:s1::::::	2
Application	Suse Suse Linux Enterprise Software Development Kit cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:::::: cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp2::::::	2
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:19:::::::* cpe:2.3:o:fedoraproject:fedora:18:::::::*	2
Os	Freebsd cpe:2.3:o:freebsd:freebsd:9.2:prerelease:::::: cpe:2.3:o:freebsd:freebsd:9.2:rc2:::::: cpe:2.3:o:freebsd:freebsd:9.2:rc1:::::: cpe:2.3:o:freebsd:freebsd:9.1:-:::::: cpe:2.3:o:freebsd:freebsd:9.1:p4:::::: cpe:2.3:o:freebsd:freebsd:9.1:p5:::::: cpe:2.3:o:freebsd:freebsd:9.0:-:::::: cpe:2.3:o:freebsd:freebsd:8.4:-:::::: cpe:2.3:o:freebsd:freebsd:8.3:-:::::: cpe:2.3:o:freebsd:freebsd:8.2:-:::::: cpe:2.3:o:freebsd:freebsd:8.1:-:::::: cpe:2.3:o:freebsd:freebsd:8.0:-::::::	12
Os	Hp Hp-Ux cpe:2.3:o:hp:hp-ux:b.11.31:::::::*	1
Os	Mandriva Business Server cpe:2.3:o:mandriva:business_server:1.0:::::::*	1
Os	Mandriva Enterprise Server cpe:2.3:o:mandriva:enterprise_server:5.0:::::::*	1
Os	Novell Suse Linux cpe:2.3:o:novell:suse_linux:11::server:::::	1
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::*	1
Os	Redhat Enterprise Linux cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux:5:::::::*	2
Os	Slackware Slackware Linux cpe:2.3:o:slackware:slackware_linux:13.37:::::::* cpe:2.3:o:slackware:slackware_linux:13.1:::::::* cpe:2.3:o:slackware:slackware_linux:13.0:::::::* cpe:2.3:o:slackware:slackware_linux:12.2:::::::* cpe:2.3:o:slackware:slackware_linux:12.1:::::::*	5

Information Assurance Vulnerability Management (IAVM)

Date	Description
2013-08-01	IAVM : 2013-A-0151 - ISC BIND 9 Remote Denial of Service Vulnerability Severity : Category I - VMSKEY : V0039823

Snort® IPS/IDS

Date	Description
2017-12-19	ISC BIND 9 DNS rdata length handling remote denial of service attempt RuleID : 44879 - Revision : 1 - Type : SERVER-OTHER
2014-01-10	ISC BIND 9 DNS rdata length handling remote denial of service attempt RuleID : 27666 - Revision : 3 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date	Description
2017-04-21	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO
2014-12-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2014-0084.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1181.nasl - Type : ACT_GATHER_INFO
2014-10-21	Name : The remote host is missing a security update for OS X Server. File : macosx_server_4_0.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL14613.nasl - Type : ACT_GATHER_INFO
2014-06-18	Name : The remote host is affected by a denial of service vulnerability. File : mcafee_web_gateway_SB10052.nasl - Type : ACT_GATHER_INFO
2014-06-18	Name : The remote host is affected by a denial of service vulnerability. File : mcafee_firewall_enterprise_SB10052.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-654.nasl - Type : ACT_GATHER_INFO
2014-01-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201401-34.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-214.nasl - Type : ACT_GATHER_INFO
2013-08-08	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bind-130805.nasl - Type : ACT_GATHER_INFO
2013-08-07	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2013-218-01.nasl - Type : ACT_GATHER_INFO
2013-08-05	Name : The remote Fedora host is missing a security update. File : fedora_2013-13831.nasl - Type : ACT_GATHER_INFO
2013-08-05	Name : The remote Fedora host is missing a security update. File : fedora_2013-13863.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1114.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1114.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1115.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130730_bind_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130730_bind97_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-07-31	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1115.nasl - Type : ACT_GATHER_INFO
2013-07-30	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1910-1.nasl - Type : ACT_GATHER_INFO
2013-07-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1115.nasl - Type : ACT_GATHER_INFO
2013-07-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1114.nasl - Type : ACT_GATHER_INFO
2013-07-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2728.nasl - Type : ACT_GATHER_INFO
2013-07-29	Name : The remote name server is prone to a denial of service attack. File : bind9_993_p2.nasl - Type : ACT_GATHER_INFO
2013-07-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-202.nasl - Type : ACT_GATHER_INFO
2013-07-28	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_7943e521f64811e286073c970e169bc2.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
http://linux.oracle.com/errata/ELSA-2014-1244
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113108....
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113251....
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html
http://rhn.redhat.com/errata/RHSA-2013-1114.html
http://rhn.redhat.com/errata/RHSA-2013-1115.html
http://secunia.com/advisories/54134
http://secunia.com/advisories/54185
http://secunia.com/advisories/54207
http://secunia.com/advisories/54211
http://secunia.com/advisories/54323
http://secunia.com/advisories/54432
http://www.debian.org/security/2013/dsa-2728
http://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc
http://www.mandriva.com/security/advisories?name=MDVSA-2013:202
http://www.securityfocus.com/bid/61479
http://www.securitytracker.com/id/1028838
http://www.ubuntu.com/usn/USN-1910-1
http://www.zerodayinitiative.com/advisories/ZDI-13-210/
https://exchange.xforce.ibmcloud.com/vulnerabilities/86004
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na...
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na...
https://kb.isc.org/article/AA-01015
https://kb.isc.org/article/AA-01016
https://kc.mcafee.com/corporate/index?page=content&id=SB10052
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://support.apple.com/kb/HT6536

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 12:36:40	Multiple Updates
2024-08-02 12:25:07	Multiple Updates
2024-08-02 01:07:31	Multiple Updates
2024-02-02 01:24:25	Multiple Updates
2024-02-01 12:07:16	Multiple Updates
2023-09-05 12:23:04	Multiple Updates
2023-09-05 01:07:11	Multiple Updates
2023-09-02 12:23:06	Multiple Updates
2023-09-02 01:07:16	Multiple Updates
2023-08-22 12:20:50	Multiple Updates
2022-10-11 01:06:57	Multiple Updates
2021-05-04 12:27:32	Multiple Updates
2021-04-22 01:33:20	Multiple Updates
2020-05-23 00:38:11	Multiple Updates
2019-04-22 21:19:09	Multiple Updates
2019-03-19 12:05:53	Multiple Updates
2019-03-18 17:19:24	Multiple Updates
2018-10-31 00:20:33	Multiple Updates
2018-01-26 12:05:01	Multiple Updates
2017-11-29 09:21:46	Multiple Updates
2017-09-19 09:26:14	Multiple Updates
2017-08-29 09:24:19	Multiple Updates
2017-04-22 13:25:52	Multiple Updates
2017-01-07 09:25:13	Multiple Updates
2016-06-28 19:41:27	Multiple Updates
2016-04-26 23:36:32	Multiple Updates
2015-01-17 05:27:26	Multiple Updates
2015-01-14 21:24:01	Multiple Updates
2014-12-27 13:25:00	Multiple Updates
2014-11-08 13:31:10	Multiple Updates
2014-10-24 13:26:04	Multiple Updates
2014-10-22 13:25:38	Multiple Updates
2014-10-11 13:26:18	Multiple Updates
2014-06-19 13:22:56	Multiple Updates
2014-06-14 13:36:13	Multiple Updates
2014-02-17 11:22:37	Multiple Updates
2014-01-19 21:29:36	Multiple Updates
2014-01-17 13:19:47	Multiple Updates
2013-12-05 17:20:50	Multiple Updates
2013-11-11 12:40:45	Multiple Updates
2013-10-10 13:20:38	Multiple Updates
2013-10-08 21:21:57	Multiple Updates
2013-10-08 17:20:08	Multiple Updates
2013-10-04 21:23:33	Multiple Updates
2013-10-04 00:21:29	Multiple Updates
2013-09-18 13:20:32	Multiple Updates
2013-08-30 17:22:47	Multiple Updates
2013-08-22 17:21:01	Multiple Updates
2013-08-07 21:20:23	Multiple Updates
2013-07-30 13:22:17	Multiple Updates
2013-07-29 21:21:44	Multiple Updates
2013-07-29 17:23:06	First insertion

Global Informations

Type	Count
Oval ID(s)	10
CPE ID(s)	108
Sources(s)	30
IAVM(s)	1
Snort® Rule(s)	2
Nessus® Exploit(s)	27

	Related
7.8	USN-1910-1
7.8	RHSA-2013:1115
7.8	RHSA-2013:1114
7.8	MDVSA-2013:202
7.8	HPSBUX02926 SSR...
7.8	GLSA-201401-34
7.8	DSA-2728
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)

7.8 - CVE-2013-4854

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU