CVE:CVE-2013-4854
CNNVD:CNNVD-201307-605
ISC BIND和DNSco BIND都是美国Internet Systems Consortium（ISC）公司的产品。ISC BIND是一套实现了DNS协议的开源软件。DNSco BIND是一套用于支持和保护在企业中安装ISC BIND软件的解决方案，该解决方案可提供安装支持和专业知识指南。
ISC BIND和DNSco BIND中的rdata.c文件中的RFC 5011实现中存在漏洞，该漏洞源于程序在构建日志信息期间没有正确地处理RDATA段，远程攻击者可通过特制的带有畸形RDATA段的查询利用该漏洞造成拒绝服务（守护程序崩溃）。以下版本中受到影响：ISC BIND 9.7.0至9.7.7版本和9.8.0至9.8.5-P1版本，9.9.0至9.9.3-P1版本，9.8.6b1和9.9.4b1版本和DNSco BIND 9.9.3-S1和9.9.4-S1b1版本。
solution:Upgrade isc bind to a higher version than 9.7.0,9.7.0:b1,9.7.0:p1,9.7.0:p2,9.7.0:rc1,9.7.0:rc2,9.7.1,9.7.1:p1,9.7.1:p2,9.7.1:rc1,9.7.2,9.7.2:p1,9.7.2:p2,9.7.2:p3,9.7.2:rc1,9.7.3,9.7.3:b1,9.7.3:p1,9.7.3:rc1,9.7.4,9.7.4:b1,9.7.4:p1,9.7.4:rc1,9.7.5,9.7.5:b1,9.7.5:rc1,9.7.5:rc2,9.7.6,9.7.6:p1,9.7.6:p2,9.7.7,9.9.0,9.9.0:a1,9.9.0:a2,9.9.0:a3,9.9.0:b1,9.9.0:b2,9.9.0:rc1,9.9.0:rc2,9.9.0:rc3,9.9.0:rc4,9.9.1,9.9.1:p1,9.9.1:p2,9.9.2,9.9.3,9.9.3:b1,9.9.3:b2,9.9.3:p1,9.9.3:rc1,9.9.3:rc2,9.8.0,9.8.0:a1,9.8.0:b1,9.8.0:p1,9.8.0:p2,9.8.0:p4,9.8.0:rc1,9.8.1,9.8.1:b1,9.8.1:b2,9.8.1:b3,9.8.1:p1,9.8.1:rc1,9.8.2:b1,9.8.2:rc1,9.8.2:rc2,9.8.3,9.8.3:p1,9.8.3:p2,9.8.4,9.8.5,9.8.5:b1,9.8.5:b2,9.8.5:p1,9.8.5:rc1,9.8.5:rc2,9.8.6:b1,and avoid the version 9.7.0,9.7.0:b1,9.7.0:p1,9.7.0:p2,9.7.0:rc1,9.7.0:rc2,9.7.1,9.7.1:p1,9.7.1:p2,9.7.1:rc1,9.7.2,9.7.2:p1,9.7.2:p2,9.7.2:p3,9.7.2:rc1,9.7.3,9.7.3:b1,9.7.3:p1,9.7.3:rc1,9.7.4,9.7.4:b1,9.7.4:p1,9.7.4:rc1,9.7.5,9.7.5:b1,9.7.5:rc1,9.7.5:rc2,9.7.6,9.7.6:p1,9.7.6:p2,9.7.7,9.9.0,9.9.0:a1,9.9.0:a2,9.9.0:a3,9.9.0:b1,9.9.0:b2,9.9.0:rc1,9.9.0:rc2,9.9.0:rc3,9.9.0:rc4,9.9.1,9.9.1:p1,9.9.1:p2,9.9.2,9.9.3,9.9.3:b1,9.9.3:b2,9.9.3:p1,9.9.3:rc1,9.9.3:rc2,9.8.0,9.8.0:a1,9.8.0:b1,9.8.0:p1,9.8.0:p2,9.8.0:p4,9.8.0:rc1,9.8.1,9.8.1:b1,9.8.1:b2,9.8.1:b3,9.8.1:p1,9.8.1:rc1,9.8.2:b1,9.8.2:rc1,9.8.2:rc2,9.8.3,9.8.3:p1,9.8.3:p2,9.8.4,9.8.5,9.8.5:b1,9.8.5:b2,9.8.5:p1,9.8.5:rc1,9.8.5:rc2,9.8.6:b1; Upgrade suse suse_linux_enterprise_software_development_kit to a higher version than 11.0:sp2,11.0:sp3,and avoid the version 11.0:sp2,11.0:sp3; Upgrade novell suse_linux to a higher version than 11,and avoid the version 11; Upgrade isc dnsco_bind to a higher version than 9.9.3:s1,9.9.4:s1b1,and avoid the version 9.9.3:s1,9.9.4:s1b1; Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade freebsd freebsd to a higher version than 8.0,8.1,8.2,8.3,8.4,9.0,9.1,9.1:p4,9.1:p5,9.2:prerelease,9.2:rc1,9.2:rc2,and avoid the version 8.0,8.1,8.2,8.3,8.4,9.0,9.1,9.1:p4,9.1:p5,9.2:prerelease,9.2:rc1,9.2:rc2; Upgrade mandriva business_server to a higher version than 1.0,and avoid the version 1.0; Upgrade mandriva enterprise_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux to a higher version than 5,6.0,and avoid the version 5,6.0; Upgrade fedoraproject fedora to a higher version than 18,19,and avoid the version 18,19; Upgrade hp hp-ux to a higher version than b.11.31,and avoid the version b.11.31; Upgrade slackware slackware_linux to a higher version than 12.1,12.2,13.0,13.1,13.37,and avoid the version 12.1,12.2,13.0,13.1,13.37