CVE-2012-5688: Input Validation
Published Dec 6, 2012
·Updated
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Affected Software
39 affected components
ISC BIND=9.8.0
ISC BIND=9.8.0-a1
ISC BIND=9.8.0-b1
ISC BIND=9.8.0-p1
ISC BIND=9.8.0-p2
ISC BIND=9.8.0-p4
ISC BIND=9.8.0-rc1
ISC BIND=9.8.1
ISC BIND=9.8.1-b1
ISC BIND=9.8.1-b2
ISC BIND=9.8.1-b3
ISC BIND=9.8.1-p1
ISC BIND=9.8.1-rc1
ISC BIND=9.8.2
ISC BIND=9.8.2-b1
ISC BIND=9.8.2-rc1
ISC BIND=9.8.2-rc2
ISC BIND=9.8.3
ISC BIND=9.8.3-p1
ISC BIND=9.8.3-p2
ISC BIND=9.8.3-p3
ISC BIND=9.8.3-p4
ISC BIND=9.9.0
ISC BIND=9.9.0-a1
ISC BIND=9.9.0-a2
ISC BIND=9.9.0-a3
ISC BIND=9.9.0-b1
ISC BIND=9.9.0-b2
ISC BIND=9.9.0-rc1
ISC BIND=9.9.0-rc2
ISC BIND=9.9.0-rc3
ISC BIND=9.9.0-rc4
ISC BIND=9.9.1
ISC BIND=9.9.1-p1
ISC BIND=9.9.1-p2
ISC BIND=9.9.1-p3
ISC BIND=9.9.1-p4
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Remediation
Patch Available
Event History
Dec 6, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5688?
CVE-2012-5688 is classified as a high-severity vulnerability capable of causing denial of service due to remote exploitation.
2
How do I fix CVE-2012-5688?
To fix CVE-2012-5688, upgrade to BIND version 9.8.4-P1 or 9.9.2-P1 or later.
3
What type of attack does CVE-2012-5688 enable?
CVE-2012-5688 enables remote attackers to perform denial of service attacks against DNS servers.
4
In which versions of BIND is CVE-2012-5688 found?
CVE-2012-5688 affects BIND versions 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1.
5
Is CVE-2012-5688 related to DNS64 functionality?
Yes, CVE-2012-5688 occurs when DNS64 functionality is enabled in affected versions of BIND.