CVE-2013-2494

CWE-119 — Buffer Overflow7 documents7 sources
Severity
4.9MEDIUM
EPSS
1.0%
top 22.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
ISC Dhcp
Timeline
PublishedMar 28
Latest updateMay 17

Description

libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.

CVSS vector

AV:N/AC:H/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages2 packages

▶Debianisc-dhcp< 4.2.4-6+2
▶NVDisc/dhcp6 versions+5

🔴Vulnerability Details

3
GHSA
GHSA-f5jm-37c8-vx73: libdns in ISC DHCP 4↗2022-05-17
▶
OSV
CVE-2013-2494: libdns in ISC DHCP 4↗2013-03-28
▶
CVEList
CVE-2013-2494: libdns in ISC DHCP 4↗2013-03-28
▶

📋Vendor Advisories

2
Red Hat
dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS↗2013-03-26
▶
Debian
CVE-2013-2494: isc-dhcp - libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a d...↗2013
▶

💬Community

1
Bugzilla
CVE-2013-2494 dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS↗2013-03-26
▶