PT-2012-6080 · Isc+3 · Isc Bind+3

Publicado 2012-12-06 · Atualizado 2024-06-15 · CVE-2012-5688

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.8.x through 9.8.3 and versions 9.9.x through 9.9.1

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via a crafted query when DNS64 is enabled.

Recommendations For ISC BIND versions 9.8.x through 9.8.3, update to version 9.8.4-P1 or later. For ISC BIND versions 9.9.x through 9.9.1, update to version 9.9.2-P1 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2012_1549

CVE-2012-5688

OPENSUSE-SU-2024:10467-1

RHSA-2012:1549

RHSA-2012_1549

Produtos afetados

Bind Server

Centos

Isc Bind

Red Hat

Referências · 57

• https://suse.com/security/cve/CVE-2014-0591 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1549.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5688 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-5166 · Nota
• https://suse.com/security/cve/CVE-2015-8705 · Nota
• https://suse.com/security/cve/CVE-2009-4022 · Nota
• http://ubuntu.com/usn/USN-1657-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-4313 · Nota
• https://suse.com/security/cve/CVE-2010-3613 · Nota
• https://suse.com/security/cve/CVE-2015-5477 · Nota
• https://suse.com/security/cve/CVE-2016-1285 · Nota
• https://suse.com/security/cve/CVE-2014-3214 · Nota
• https://suse.com/security/cve/CVE-2014-8680 · Nota
• https://access.redhat.com/errata/RHSA-2012:1549 · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-December/081187.html · Nota