Lucene search
AmazonALAS-2012-124HistorySep 22, 2012 - 9:34 p.m.
Important: bind
2012-09-2221:34:00
alas.aws.amazon.com
14
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.4 Low
EPSS
Percentile
97.2%
Issue Overview:
A flaw was found in the way BIND handled resource records with a large RDATA value. A malicious owner of a DNS domain could use this flaw to create specially-crafted DNS resource records, that would cause a recursive resolver or secondary server to exit unexpectedly with an assertion failure. (CVE-2012-4244)
Affected Packages:
bind
Issue Correction:
Run yum update bind to update your system.
New Packages:
i686:
bind-9.8.2-0.10.rc1.24.amzn1.i686
bind-libs-9.8.2-0.10.rc1.24.amzn1.i686
bind-chroot-9.8.2-0.10.rc1.24.amzn1.i686
bind-sdb-9.8.2-0.10.rc1.24.amzn1.i686
bind-utils-9.8.2-0.10.rc1.24.amzn1.i686
bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.i686
bind-devel-9.8.2-0.10.rc1.24.amzn1.i686
src:
bind-9.8.2-0.10.rc1.24.amzn1.src
x86_64:
bind-utils-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-devel-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-chroot-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-sdb-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-libs-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-9.8.2-0.10.rc1.24.amzn1.x86_64
Additional References
Red Hat: CVE-2012-4244
Mitre: CVE-2012-4244
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | bind | < 9.8.2-0.10.rc1.24.amzn1 | bind-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-libs | < 9.8.2-0.10.rc1.24.amzn1 | bind-libs-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-chroot | < 9.8.2-0.10.rc1.24.amzn1 | bind-chroot-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-sdb | < 9.8.2-0.10.rc1.24.amzn1 | bind-sdb-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-utils | < 9.8.2-0.10.rc1.24.amzn1 | bind-utils-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-debuginfo | < 9.8.2-0.10.rc1.24.amzn1 | bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-devel | < 9.8.2-0.10.rc1.24.amzn1 | bind-devel-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | bind-utils | < 9.8.2-0.10.rc1.24.amzn1 | bind-utils-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind-devel | < 9.8.2-0.10.rc1.24.amzn1 | bind-devel-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind-chroot | < 9.8.2-0.10.rc1.24.amzn1 | bind-chroot-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
Related
nessus
nessus
CentOS 5 : bind97 (CESA-2012:1266)
2012-09-15 00:00:00
SuSE 10 Security Update : bind (ZYPP Patch Number 8298)
2012-09-18 00:00:00
Fedora 16 : bind-9.8.3-4.P3.fc16 (2012-14030)
2012-09-27 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 08:57:26
openvas
openvas
SuSE Update for bind openSUSE-SU-2012:1192-1 (bind)
2012-12-13 00:00:00
CentOS Update for bind CESA-2012:1267 centos5
2012-09-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:1333-1)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2012:1267) Important: bind security and bug fix update
2012-09-14 00:00:00
(RHSA-2012:1268) Important: bind security update
2012-09-14 00:00:00
(RHSA-2012:1266) Important: bind97 security update
2012-09-14 00:00:00
suse
suse
Security update for bind (critical)
2012-09-18 02:08:27
Security update for bind (critical)
2012-10-13 06:09:20
bind: fixed a remote denial of service attack (abort) (critical)
2012-09-17 19:08:37
cve
cve
CVE-2012-4244
2012-09-14 10:33:00
ubuntu
ubuntu
Bind vulnerability
2012-09-13 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: bind-9.9.1-10.P3.fc18
2012-09-23 04:55:51
[SECURITY] Fedora 17 Update: bind-9.9.1-9.P3.fc17
2012-09-23 03:28:42
[SECURITY] Fedora 16 Update: bind-9.8.3-4.P3.fc16
2012-09-27 04:33:00
centos
centos
bind, caching security update
2012-09-14 10:33:14
bind97 security update
2012-09-14 10:09:49
bind security update
2012-09-14 11:25:59
debian
debian
[SECURITY] [DSA 2547-1] bind9 security update
2012-09-12 20:08:07
oraclelinux
oraclelinux
bind security update
2012-09-14 00:00:00
bind security and bug fix update
2012-09-14 00:00:00
bind97 security update
2012-09-14 00:00:00
securityvulns
securityvulns
ISC bind DoS
2012-09-18 00:00:00
[USN-1566-1] Bind vulnerability
2012-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2012-4244
2012-09-13 00:00:00
prion
prion
Design/Logic Flaw
2012-09-14 10:33:00
debiancve
debiancve
CVE-2012-4244
2012-09-14 10:33:00
checkpoint_advisories
checkpoint_advisories
f5
f5
K14201 : BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2014-08-26 00:00:00
SOL14201 - BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2013-02-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:06.bind
2012-11-22 00:00:00
freebsd
freebsd
FreeBSD -- Multiple Denial of Service vulnerabilities with named(8)
2012-11-22 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2012-09-24 00:00:00
threatpost
threatpost
Six Security Flaws Fixed in BIND 9.9.2
2012-12-05 16:15:32
vmware
vmware
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.4 Low
EPSS
Percentile
97.2%
Related for ALAS-2012-124