CVE-2013-2266
bind: libdns regular expressions excessive resource consumption DoS
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
libdns en ISC BIND v9.7.x y v9.8.x antes v9.8.4-P2, v9.8.5 antes de v9.8.5b2, v9.9.x antes de v9.9.2-P2, y v9.9.3 antes v9.9.3b2 en plataformas UNIX permite a atacantes remotos para causar una denegación de servicio (consumo de memoria) a través de una expresión regular manipulada, como lo demuestra un ataque memoria de agotamiento contra un equipo que ejecuta un proceso llamado.
The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly. A denial of service flaw was found in the libdns library. A remote attacker could use this flaw to send a specially-crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash. Note: This update disables the syntax checking of NAPTR resource records.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-02-21 CVE Reserved
- 2013-03-27 CVE Published
- 2024-08-06 CVE Updated
- 2025-07-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://linux.oracle.com/errata/ELSA-2014-1244 | X_refsource_confirm | |
| http://support.apple.com/kb/HT5880 | X_refsource_confirm |
|
| http://www.securityfocus.com/bid/58736 | Vdb Entry | |
| https://kb.isc.org/article/AA-00871 | X_refsource_confirm | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19579 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | a3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.0 Search vendor "Isc" for product "Bind" and version "9.9.0" | rc4 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.1 Search vendor "Isc" for product "Bind" and version "9.9.1" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.2 Search vendor "Isc" for product "Bind" and version "9.9.2" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.9.3 Search vendor "Isc" for product "Bind" and version "9.9.3" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.0 Search vendor "Isc" for product "Bind" and version "9.7.0" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.1 Search vendor "Isc" for product "Bind" and version "9.7.1" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | p3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.2 Search vendor "Isc" for product "Bind" and version "9.7.2" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.3 Search vendor "Isc" for product "Bind" and version "9.7.3" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.4 Search vendor "Isc" for product "Bind" and version "9.7.4" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.5 Search vendor "Isc" for product "Bind" and version "9.7.5" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.7.6 Search vendor "Isc" for product "Bind" and version "9.7.6" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | a1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | p4 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.0 Search vendor "Isc" for product "Bind" and version "9.8.0" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | b3 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.1 Search vendor "Isc" for product "Bind" and version "9.8.1" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | b1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | rc1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.2 Search vendor "Isc" for product "Bind" and version "9.8.2" | rc2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | p1 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.3 Search vendor "Isc" for product "Bind" and version "9.8.3" | p2 |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.4 Search vendor "Isc" for product "Bind" and version "9.8.4" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | - |
Affected
| ||||||
| Isc Search vendor "Isc" | Bind Search vendor "Isc" for product "Bind" | 9.8.5 Search vendor "Isc" for product "Bind" and version "9.8.5" | b1 |
Affected
| ||||||