CVE-2013-2266

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
iscbind
9.9.0
iscbind
9.9.0:a1
iscbind
9.9.0:a2
iscbind
9.9.0:a3
iscbind
9.9.0:b1
iscbind
9.9.0:b2
iscbind
9.9.0:rc1
iscbind
9.9.0:rc2
iscbind
9.9.0:rc3
iscbind
9.9.0:rc4
iscbind
9.9.1
iscbind
9.9.1:p1
iscbind
9.9.1:p2
iscbind
9.9.2
iscbind
9.9.3
iscbind
9.9.3:b1
iscbind
9.7.0
iscbind
9.7.0:b1
iscbind
9.7.0:p1
iscbind
9.7.0:p2
iscbind
9.7.0:rc1
iscbind
9.7.0:rc2
iscbind
9.7.1
iscbind
9.7.1:p1
iscbind
9.7.1:p2
iscbind
9.7.1:rc1
iscbind
9.7.2
iscbind
9.7.2:p1
iscbind
9.7.2:p2
iscbind
9.7.2:p3
iscbind
9.7.2:rc1
iscbind
9.7.3
iscbind
9.7.3:b1
iscbind
9.7.3:p1
iscbind
9.7.3:rc1
iscbind
9.7.4
iscbind
9.7.4:b1
iscbind
9.7.4:p1
iscbind
9.7.4:rc1
iscbind
9.7.5
iscbind
9.7.5:b1
iscbind
9.7.5:rc1
iscbind
9.7.5:rc2
iscbind
9.7.6
iscbind
9.7.6:p1
iscbind
9.7.6:p2
iscbind
9.8.0
iscbind
9.8.0:a1
iscbind
9.8.0:b1
iscbind
9.8.0:p1
iscbind
9.8.0:p2
iscbind
9.8.0:p4
iscbind
9.8.0:rc1
iscbind
9.8.1
iscbind
9.8.1:b1
iscbind
9.8.1:b2
iscbind
9.8.1:b3
iscbind
9.8.1:p1
iscbind
9.8.1:rc1
iscbind
9.8.2:b1
iscbind
9.8.2:rc1
iscbind
9.8.2:rc2
iscbind
9.8.3
iscbind
9.8.3:p1
iscbind
9.8.3:p2
iscbind
9.8.4
iscbind
9.8.5
iscbind
9.8.5:b1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
quantal
Fixed 1:9.8.1.dfsg.P1-4.2ubuntu3.2
released
precise
Fixed 1:9.8.1.dfsg.P1-4ubuntu0.6
released
oneiric
Fixed 1:9.7.3.dfsg-1ubuntu4.6
released
lucid
Fixed 1:9.7.0.dfsg.P1-1ubuntu0.9
released
hardy
not-affected
References