CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2013-01-25

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Ubuntu Linux (Canonical)
• Bind (Isc)
• Enterprise Linux Desktop (Redhat)
• Enterprise Linux Hpc Node (Redhat)
• Enterprise Linux Server (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server Eus (Redhat)
• Enterprise Linux Workstation (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2013-0550.html
• http://www.isc.org/software/bind/advisories/cve-2012-5689
• http://www.ubuntu.com/usn/USN-2693-1
• https://kb.isc.org/article/AA-00855/