Every CVE Search/ Get API key

CVE-2013-2266

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2,...

7.8 HighFix available

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Exploit likelihood

42.9%Up 19.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
CVE-2013-2266
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
CVE-2013-2266
Updated
2026-11-02
EUVDEUVD-2013-2212 No score

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
EUVD-2013-2212
Updated
2026-11-03
GitHub AdvisoriesGHSA-42v2-796f-qqmv No score

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2,...

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
GHSA-42v2-796f-qqmv
Weakness
CWE-119
Updated
2026-11-02
OSV No score

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
CVE-2013-2266
Updated
2026-11-02
OSVDEBIAN-CVE-2013-2266 No score

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

Record
DEBIAN-CVE-2013-2266
Updated
2026-11-02
OSVopenSUSE-SU-2024:10358-1 No score

dhcp-4.3.3.P1-3.1 on GA media

These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10358-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score

bind-9.10.3P4-21.1 on GA media

These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10467-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind9
Debian:12
 before 1:9.8.4.dfsg.P1-6+nmu1
1:9.8.4.dfsg.P1-6+nmu1
bind9
Debian:13
 before 1:9.8.4.dfsg.P1-6+nmu1
1:9.8.4.dfsg.P1-6+nmu1
bind9
Debian:14
 before 1:9.8.4.dfsg.P1-6+nmu1
1:9.8.4.dfsg.P1-6+nmu1
bind9
Debian:6.0
 before 1:9.7.3.dfsg-1~squeeze10, plus listed versions
1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+1
Show 8 moreShow less
1:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+11:9.7.3.dfsg-1~squeeze41:9.7.3.dfsg-1~squeeze51:9.7.3.dfsg-1~squeeze61:9.7.3.dfsg-1~squeeze71:9.7.3.dfsg-1~squeeze81:9.7.3.dfsg-1~squeeze9
1:9.7.3.dfsg-1~squeeze10
bind
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-debuginfo
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-libs
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-utils
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-chroot
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-devel
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
Show 30 moreShow less
Affected packages
PackageAffectedFixed
bind-sdb
Red Hat:enterprise_linux:6::client
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-libs
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-utils
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-chroot
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-devel
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-sdb
Red Hat:enterprise_linux:6::computenode
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-chroot
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-debuginfo
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-libs
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-utils
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-devel
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-sdb
Red Hat:enterprise_linux:6::server
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-chroot
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-libs
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-utils
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-devel
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind-sdb
Red Hat:enterprise_linux:6::workstation
 before 32:9.8.2-0.17.rc1.el6_4.4
32:9.8.2-0.17.rc1.el6_4.4
bind97
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
bind97-chroot
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
bind97-debuginfo
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
bind97-devel
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
bind97-libs
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
bind97-utils
Red Hat:enterprise_linux:5::server
 before 32:9.7.0-17.P2.el5_9.1
32:9.7.0-17.P2.el5_9.1
dhcp
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 4.3.3.P1-3.1
4.3.3.P1-3.1
bind
openSUSE:Tumbleweed
From an advisory covering 37 CVEs
 before 9.10.3P4-21.1
9.10.3P4-21.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2266 is a high vulnerability (CVSS 7.8) in Isc Bind, published March 28, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 42.9%, the 98th percentile. Fixed in bind9 1:9.8.4.dfsg.P1-6+nmu1.

References

Show 73 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open