CVE-2013-5661 : Cache Poisoning issue exists in DNS Response Rate Limiting.

Cache Poisoning issue exists in DNS Response Rate Limiting.

Published 2019-11-05 19:15:10

Updated 2019-11-08 19:04:22

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2013-5661

Redhat » Enterprise Linux » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
ISC » Bind
Versions from including (>=) 9.8.0 and up to, including, (<=) 9.9.0
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*
Matching versions
Nlnetlabs » NSD » Version: 3.2.15
cpe:2.3:a:nlnetlabs:nsd:3.2.15:*:*:*:*:*:*:*
Matching versions
NIC » Knot Resolver
Versions before (<) 1.3.0
cpe:2.3:a:nic:knot_resolver:*:*:*:*:*:*:*:*
Matching versions

Top countries where our scanners detected CVE-2013-5661

Top open port discovered on systems with this issue 53

IPs affected by CVE-2013-5661 139,984

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-5661!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

EPSS FAQ

1.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.6	LOW	AV:N/AC:H/Au:N/C:N/I:P/A:N	4.9	2.9	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Assigned by: nvd@nist.gov (Primary)

https://security-tracker.debian.org/tracker/CVE-2013-5661

CVE-2013-5661
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-5661

Bug 854109 – VUL-0: CVE-2013-5661: bind: DNS response rate limiting can simplify cache poisoning attacks
Issue Tracking;Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5661

1038750 – (CVE-2013-5661) CVE-2013-5661 DNS response rate limiting can simplify cache poisoning attacks
Issue Tracking;Third Party Advisory

Jump to