Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Pories Ediansyah

#38786de 53,635
7.1CVSS total
Vulnerabilidades · 1
PT-2013-1833
7.1
2013-01-25
Isc · Isc Bind · CVE-2012-5689
**Name of the Vulnerable Software and Affected Versions** ISC BIND versions 9.8.x through 9.8.4-P1 ISC BIND versions 9.9.x through 9.9.2-P1 **Description** The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and the named daemon exiting. This occurs when a query for an AAAA record is made in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule. **Recommendations** For ISC BIND versions 9.8.x through 9.8.4-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. For ISC BIND versions 9.9.x through 9.9.2-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. As a temporary workaround, consider restricting access to DNS64 configurations with Response Policy Zones until a patch is available.