CVE-2012-5689

Publication date 25 January 2013

Last updated 24 July 2024

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
bind9	15.04 vivid	Not affected
	14.10 utopic	Not affected
	14.04 LTS trusty	Not affected
	13.10 saucy	Ignored
	13.04 raring	Ignored
	12.10 quantal	Ignored
	12.04 LTS precise	Fixed 1:9.8.1.dfsg.P1-4ubuntu0.12
	11.10 oneiric	Not affected
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not affected

Notes

mdeslaur

uncommon setup: must be using RPZ rewrite rules and also be using DNS64. Setting priority as "low"

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
bind9	Vendor: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699145

References

Related Ubuntu Security Notices (USN)