Read the docs
TI-2013-05241 Aliases CVE-2013-6230GHSA-v9c9-f7pq-rcx4

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV…

Priority LOW 39CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask.

Why it matters now

EPSS 0.05706 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 58

CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:*9.6VulnerableISC
cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:*:*:*:*9.6 r5_p1VulnerableISC
cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:*:*:*:*9.6 r6_b1VulnerableISC
cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:*:*:*:*9.6 r6_rc1VulnerableISC
cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:*:*:*:*9.6 r6_rc2VulnerableISC
cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:*:*:*:*9.6 r7_p1VulnerableISC
cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:*:*:*:*9.6 r7_p2VulnerableISC
cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:*:*:*:*9.6 r9_p1VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:*9.8.0VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:*9.8.0 a1VulnerableISC
  • cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:*:*:*:* Versions 9.6 r5_p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:*:*:*:* Versions 9.6 r6_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:*:*:*:* Versions 9.6 r6_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:*:*:*:* Versions 9.6 r6_rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:*:*:*:* Versions 9.6 r7_p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:*:*:*:* Versions 9.6 r7_p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:*:*:*:* Versions 9.6 r9_p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:* Versions 9.8.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:* Versions 9.8.0 a1 Vulnerable ·ISC
Show 48 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:*9.8.0 b1VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*9.8.0 p1VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:*9.8.0 p2VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:*9.8.0 p4VulnerableISC
cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:*9.8.0 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:*9.8.1VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:*9.8.1 b1VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:*9.8.1 b2VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:*9.8.1 b3VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:*9.8.1 p1VulnerableISC
cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:*9.8.1 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:*9.8.2 b1VulnerableISC
cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:*9.8.2 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:*9.8.2 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:*9.8.3VulnerableISC
cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:*9.8.3 p1VulnerableISC
cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:*9.8.3 p2VulnerableISC
cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:*9.8.4VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:*:*:*:*:*:*:*9.8.5VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:b1:*:*:*:*:*:*9.8.5 b1VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:b2:*:*:*:*:*:*9.8.5 b2VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:p1:*:*:*:*:*:*9.8.5 p1VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:p2:*:*:*:*:*:*9.8.5 p2VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:rc1:*:*:*:*:*:*9.8.5 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.8.5:rc2:*:*:*:*:*:*9.8.5 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.8.6:b1:*:*:*:*:*:*9.8.6 b1VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:*9.9.0VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:*9.9.0 a1VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:*9.9.0 a2VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:*9.9.0 a3VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:*9.9.0 b1VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:*9.9.0 b2VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:*9.9.0 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:*9.9.0 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:*9.9.0 rc3VulnerableISC
cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:*9.9.0 rc4VulnerableISC
cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:*9.9.1VulnerableISC
cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:*9.9.1 p1VulnerableISC
cpe:2.3:a:isc:bind:9.9.1:p2:*:*:*:*:*:*9.9.1 p2VulnerableISC
cpe:2.3:a:isc:bind:9.9.2:*:*:*:*:*:*:*9.9.2VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*9.9.3VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:b1:*:*:*:*:*:*9.9.3 b1VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:b2:*:*:*:*:*:*9.9.3 b2VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:p1:*:*:*:*:*:*9.9.3 p1VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:p2:*:*:*:*:*:*9.9.3 p2VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:rc1:*:*:*:*:*:*9.9.3 rc1VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:rc2:*:*:*:*:*:*9.9.3 rc2VulnerableISC
cpe:2.3:a:isc:bind:9.9.4:b1:*:*:*:*:*:*9.9.4 b1VulnerableISC
  • cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:* Versions 9.8.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:* Versions 9.8.0 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:* Versions 9.8.0 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:* Versions 9.8.0 p4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:* Versions 9.8.0 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:* Versions 9.8.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:* Versions 9.8.1 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:* Versions 9.8.1 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:* Versions 9.8.1 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:* Versions 9.8.1 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:* Versions 9.8.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:* Versions 9.8.2 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:* Versions 9.8.2 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:* Versions 9.8.2 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:* Versions 9.8.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:* Versions 9.8.3 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:* Versions 9.8.3 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:* Versions 9.8.4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:*:*:*:*:*:*:* Versions 9.8.5 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:b1:*:*:*:*:*:* Versions 9.8.5 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:b2:*:*:*:*:*:* Versions 9.8.5 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:p1:*:*:*:*:*:* Versions 9.8.5 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:p2:*:*:*:*:*:* Versions 9.8.5 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:rc1:*:*:*:*:*:* Versions 9.8.5 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.5:rc2:*:*:*:*:*:* Versions 9.8.5 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.8.6:b1:*:*:*:*:*:* Versions 9.8.6 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:* Versions 9.9.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:* Versions 9.9.0 a1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:* Versions 9.9.0 a2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:* Versions 9.9.0 a3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:* Versions 9.9.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:* Versions 9.9.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:* Versions 9.9.0 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:* Versions 9.9.0 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:* Versions 9.9.0 rc3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:* Versions 9.9.0 rc4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:* Versions 9.9.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:* Versions 9.9.1 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.1:p2:*:*:*:*:*:* Versions 9.9.1 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.2:*:*:*:*:*:*:* Versions 9.9.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:* Versions 9.9.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:b1:*:*:*:*:*:* Versions 9.9.3 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:b2:*:*:*:*:*:* Versions 9.9.3 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:p1:*:*:*:*:*:* Versions 9.9.3 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:p2:*:*:*:*:*:* Versions 9.9.3 p2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:rc1:*:*:*:*:*:* Versions 9.9.3 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:rc2:*:*:*:*:*:* Versions 9.9.3 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.4:b1:*:*:*:*:*:* Versions 9.9.4 b1 Vulnerable ·ISC

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-6230
  2. 2026-10-03 Alias added: GHSA-v9c9-f7pq-rcx4

References

Advisory 3

  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2023-27571 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related… CVSS 3.1HIGH 7.5
  • TI-2021-07476 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVSS 3.1CRITICAL 9.8
  • TI-2023-27773 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… CVSS 3.1HIGH 7.5
  • TI-2020-06910 A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVSS 3.1HIGH 7.5
  • TI-2016-02320 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x… CVSS 3.0HIGH 7.5
See all 192 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences