CVE-2012-5689

high · 7.1

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

7.1

CVSS

12.0%

EPSS (exploit prob.)

96th

EPSS percentile

2013-01-25

Published

AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.1
isc	bind	9.9.1
isc	bind	9.9.1
isc	bind	9.9.2
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_hpc_node	6.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_server_eus	6.4.z
redhat	enterprise_linux_workstation	6.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.2
isc	bind	9.8.2
isc	bind	9.8.2
isc	bind	9.8.3
isc	bind	9.8.3
isc	bind	9.8.3
isc	bind	9.8.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-5689