CVE-2012-5689: Input Validation
ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5689?
CVE-2012-5689 is classified as a high-severity vulnerability that can lead to a denial of service.
How do I fix CVE-2012-5689?
To fix CVE-2012-5689, upgrade to ISC BIND version 9.9.3 or later, which contains patches for this vulnerability.
What attack vectors are associated with CVE-2012-5689?
CVE-2012-5689 can be exploited remotely by sending specially crafted DNS queries for AAAA records.
Which versions of ISC BIND are affected by CVE-2012-5689?
ISC BIND versions 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1 are affected by CVE-2012-5689.
What symptoms indicate exploitation of CVE-2012-5689?
Exploitation of CVE-2012-5689 may result in assertion failures that cause the named daemon to crash.