PT-2013-1833 · Isc+4 · Isc Bind+4

Pories Ediansyah · Publicado 2013-01-25 · Atualizado 2024-06-15 · CVE-2012-5689

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.8.x through 9.8.4-P1 ISC BIND versions 9.9.x through 9.9.2-P1

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and the named daemon exiting. This occurs when a query for an AAAA record is made in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule.

Recommendations For ISC BIND versions 9.8.x through 9.8.4-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. For ISC BIND versions 9.9.x through 9.9.2-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. As a temporary workaround, consider restricting access to DNS64 configurations with Response Policy Zones until a patch is available.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2013_0550

CVE-2012-5689

OPENSUSE-SU-2024:10467-1

RHSA-2013:0550

RHSA-2013_0550

USN-2693-1

Produtos afetados

Bind Server

Centos

Isc Bind

Red Hat

Ubuntu

Referências · 69

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb · Exploit
• 🔥 https://github.com/robertdavidgraham/cve-2015-5477 · Exploit
• 🔥 https://github.com/elceef/tkeypoc · Exploit
• https://suse.com/security/cve/CVE-2014-0591 · Nota
• http://rhn.redhat.com/errata/RHSA-2013-0550.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-5166 · Nota
• https://suse.com/security/cve/CVE-2015-8705 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-5689 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-4022 · Nota
• https://osv.dev/vulnerability/USN-2693-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2693-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-4313 · Nota
• https://rhn.redhat.com/errata/RHSA-2013-0550.html · Nota
• https://ubuntu.com/security/CVE-2012-5689 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3613 · Nota