CVE-2012-5689

2013-01-2512:00:00

CWE-20

[email protected]

web.nvd.nist.gov

128

cve-2012-5689

isc bind

denial of service

dns64

response policy zone

aaaa record

6.3 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.012 Low

EPSS

Percentile

84.7%

JSON

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

CPENameOperatorVersion
isc:bindisc bindeq9.9.0
isc:bindisc bindeq9.9.1
isc:bindisc bindeq9.9.2
redhat:enterprise_linux_hpc_noderedhat enterprise linux hpc nodeeq6.0
redhat:enterprise_linux_server_eusredhat enterprise linux server euseq6.4.z
redhat:enterprise_linux_server_ausredhat enterprise linux server auseq6.4
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq6.0
redhat:enterprise_linux_serverredhat enterprise linux servereq6.0
redhat:enterprise_linux_workstationredhat enterprise linux workstationeq6.0
isc:bindisc bindeq9.8.4

CPE	Name	Operator	Version
isc:bind	isc bind	eq	9.9.0
isc:bind	isc bind	eq	9.9.1
isc:bind	isc bind	eq	9.9.2
redhat:enterprise_linux_hpc_node	redhat enterprise linux hpc node	eq	6.0
redhat:enterprise_linux_server_eus	redhat enterprise linux server eus	eq	6.4.z
redhat:enterprise_linux_server_aus	redhat enterprise linux server aus	eq	6.4
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	6.0
redhat:enterprise_linux_server	redhat enterprise linux server	eq	6.0
redhat:enterprise_linux_workstation	redhat enterprise linux workstation	eq	6.0
isc:bind	isc bind	eq	9.8.4