MNBSD-2013-0: named crash (denial of service) from malformed rdata in a query

Description

A specially crafted query containing malformed rdata can cause named(8) to crash with an assertion failure, resulting in a denial of service. Only systems running the BIND name server are affected; DNS client-only systems are not. Patch obtained from FreeBSD.

Affected Versions

bind

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc
• https://www.cve.org/CVERecord?id=CVE-2013-4854

Additional Information

Aliases: CVE-2013-4854

Published: July 28, 2013
Last Modified: July 28, 2013