PT-2013-1833 · Isc+4 · Isc Bind+4

Pories Ediansyah · Published 2013-01-25 · Updated 2024-06-15 · CVE-2012-5689

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.8.x through 9.8.4-P1 ISC BIND versions 9.9.x through 9.9.2-P1

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and the named daemon exiting. This occurs when a query for an AAAA record is made in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule.

Recommendations For ISC BIND versions 9.8.x through 9.8.4-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. For ISC BIND versions 9.9.x through 9.9.2-P1, consider adding an AAAA rewrite rule to the Response Policy Zone to prevent the denial of service. As a temporary workaround, consider restricting access to DNS64 configurations with Response Policy Zones until a patch is available.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2013_0550

CVE-2012-5689

OPENSUSE-SU-2024:10467-1

RHSA-2013:0550

RHSA-2013_0550

USN-2693-1

Affected Products

Bind Server

Centos

Isc Bind

Red Hat

Ubuntu

References · 69

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb · Exploit
• 🔥 https://github.com/robertdavidgraham/cve-2015-5477 · Exploit
• 🔥 https://github.com/elceef/tkeypoc · Exploit
• http://rhn.redhat.com/errata/RHSA-2013-0550.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-5689 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2693-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2693-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-5689 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5689 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10467-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-5689 · Security Note
• http://ubuntu.com/usn/USN-2693-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5689 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-0550.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477 · Security Note