CVE-2012-5689

HIGH 7.1CVE-2012-5689 · Published 25/01/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
bind isc	`= 9.8.0= 9.8.1= 9.8.2= 9.8.3= 9.8.4= 9.9.0= 9.9.1= 9.9.2`	No fix yet

Description

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

References

rhn.redhat.com/errata/RHSA-2013-0550.html · Third Party Advisory
isc.org/software/bind/advisories/cve-2012-5689 · Vendor Advisory
ubuntu.com/usn/USN-2693-1 · Third Party Advisory
kb.isc.org/article/AA-00855 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free