CVE-2013-2494
published 2013-03-28CVE-2013-2494: libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular…
PriorityP419medium4.9CVSS 2.0
AVNACHAuSCNINAC
EPSS
1.17%
63.4th percentile
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | isc-dhcp | < isc-dhcp 4.2.4-6 (bookworm) | isc-dhcp 4.2.4-6 (bookworm) |
| isc | dhcp | — | — |
| isc | dhcp | — | — |
| isc | dhcp | — | — |
| isc | dhcp | — | — |
| isc | dhcp | — | — |
| isc | dhcp | — | — |
CVSS provenance
nvdv2.04.9MEDIUMAV:N/AC:H/Au:S/C:N/I:N/A:C
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS
vendor_redhat·2013-03-26·CVSS 7.8
CVE-2013-2494 [HIGH] dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS
dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.
Statement: Not Vulnerable. This issue does not affect the version of dhcp as shipped with Red Hat Enterprise Linux 5 and 6.
Package: dhcp (Red Hat Enterprise Linux 4) - Not affected
Package: dhcp (Red Hat Enterprise Linux 5) - Not affected
Package: dhcp (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2013-2494: isc-dhcp - libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a d...
vendor_debian·2013·CVSS 7.8
CVE-2013-2494 [HIGH] CVE-2013-2494: isc-dhcp - libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a d...
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.
Scope: local
bookworm: resolved (fixed in 4.2.4-6)
bullseye: resolved (fixed in 4.2.4-6)
sid: resolved (fixed in 4.2.4-6)
trixie: resolved (fixed in 4.2.4-6)
GHSA
GHSA-f5jm-37c8-vx73: libdns in ISC DHCP 4
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2013-2494 [HIGH] CWE-119 GHSA-f5jm-37c8-vx73: libdns in ISC DHCP 4
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.
OSV
CVE-2013-2494: libdns in ISC DHCP 4
osv·2013-03-28·CVSS 7.8
CVE-2013-2494 [HIGH] CVE-2013-2494: libdns in ISC DHCP 4
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.
No detection rules found.
No public exploits indexed.
2013-03-28
Published