CVE-2012-5689
Fixed in a distro release EPSS 12%
ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
Products: isc bind, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bind9 | 1:9.8.4.dfsg.P1-6+nmu1 |
| Debian 13 | bind9 | 1:9.8.4.dfsg.P1-6+nmu1 |
| Debian 14 | bind9 | 1:9.8.4.dfsg.P1-6+nmu1 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.17.rc1.el6.3 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.17.rc1.el6.3 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.4 |
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 |