{"id":"CVE-2013-2266","aliases":["DEBIAN-CVE-2013-2266","DSA-2656-1","EUVD-2013-2212","GHSA-42v2-796f-qqmv","RHSA-2013:0689","RHSA-2013:0690","openSUSE-SU-2024:10358-1","openSUSE-SU-2024:10467-1"],"status":"published","title":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2,...","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.42851,"percentile":0.98725,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-03-28T16:00:00Z","modified":"2026-09-01T20:03:15Z","fixes":[{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.8.4.dfsg.P1-6+nmu1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.8.4.dfsg.P1-6+nmu1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.8.4.dfsg.P1-6+nmu1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"bind9","fixed_in":["1:9.7.3.dfsg-1~squeeze10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-debuginfo","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-libs","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-utils","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-chroot","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-devel","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-sdb","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-debuginfo","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-libs","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-utils","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-chroot","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-devel","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-sdb","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-chroot","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-debuginfo","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-libs","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-utils","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-devel","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-sdb","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-chroot","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-debuginfo","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-libs","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-utils","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-devel","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-sdb","fixed_in":["32:9.8.2-0.17.rc1.el6_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-chroot","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-debuginfo","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-devel","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-libs","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-utils","fixed_in":["32:9.7.0-17.P2.el5_9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.4.dfsg.P1-6+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.4.dfsg.P1-6+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.4.dfsg.P1-6+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.7.3.dfsg-1~squeeze10"}]}],"versions":["1:9.7.2.dfsg.P3-1.1","1:9.7.3.dfsg-1~squeeze1","1:9.7.3.dfsg-1~squeeze1~bpo50+1","1:9.7.3.dfsg-1~squeeze2","1:9.7.3.dfsg-1~squeeze2~bpo50+1","1:9.7.3.dfsg-1~squeeze3","1:9.7.3.dfsg-1~squeeze3~bpo50+1","1:9.7.3.dfsg-1~squeeze4","1:9.7.3.dfsg-1~squeeze5","1:9.7.3.dfsg-1~squeeze6","1:9.7.3.dfsg-1~squeeze7","1:9.7.3.dfsg-1~squeeze8","1:9.7.3.dfsg-1~squeeze9"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.8.2-0.17.rc1.el6_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-17.P2.el5_9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3.P1-3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.3P4-21.1"}]}],"bundled":37}],"products":[{"vendor":"isc","product":"bind"}],"references":[{"url":"https://kb.isc.org/article/AA-00871/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101603.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1244","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0689.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.isc.org/software/bind/advisories/cve-2013-2266","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://kb.isc.org/article/AA-00879/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101500.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=136804614120794\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/58736","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0690.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19579","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.debian.org/security/2013/dsa-2656","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT5880","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1783-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2266","tags":["advisory"]},{"url":"https://kb.isc.org/article/AA-00871","tags":["article"]},{"url":"https://kb.isc.org/article/AA-00879","tags":["article"]},{"url":"https://github.com/advisories/GHSA-42v2-796f-qqmv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-2266","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0689","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=928027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=928439","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0689.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2266","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2266","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0690","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0690.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8864","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-2266","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2013-03-28T16:00:00Z","modified":"2024-08-06T15:27:41.144Z","updated_at":"2026-11-02T14:34:56.19172Z"}],"euvd":[{"id":"EUVD-2013-2212","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2013-03-28T16:00:00Z","modified":"2024-08-06T15:27:41Z","updated_at":"2026-11-03T01:56:39.164386Z"}],"ghsa":[{"id":"GHSA-42v2-796f-qqmv","title":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2,...","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2022-05-14T02:13:38Z","modified":"2025-04-11T04:09:53Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:13.537017Z"}],"nvd":[{"id":"CVE-2013-2266","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2013-03-28T16:55:01.04Z","modified":"2026-06-16T23:53:02.93Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:24.091325Z"}],"osv":[{"id":"CVE-2013-2266","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2013-03-28T16:55:01Z","modified":"2026-04-10T03:44:25.725361Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-2266","description":"libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.","status":"published","published":"2013-03-28T16:55:01.04Z","modified":"2026-09-01T20:03:15.792632975Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DSA-2656-1","title":"bind9 - denial of service","status":"published","published":"2013-03-29T00:00:00Z","modified":"2026-03-09T01:18:04.799144Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10358-1","title":"dhcp-4.3.3.P1-3.1 on GA media","description":"These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:31.811732Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10467-1","title":"bind-9.10.3P4-21.1 on GA media","description":"These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:15.60024Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:0689","title":"Red Hat Security Advisory: bind security and bug fix update","status":"published","published":"2024-09-15T20:44:58Z","modified":"2026-06-26T12:21:44.250191723Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0690","title":"Red Hat Security Advisory: bind97 security update","status":"published","published":"2024-09-15T20:45:03Z","modified":"2025-11-22T10:43:25Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}