Vulnerability-Lookup

CVE-2012-5689 (GCVE-0-2012-5689)

Vulnerability from cvelistv5 – Published: 2013-01-25 11:00 – Updated: 2024-08-06 21:14

Summary

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://kb.isc.org/article/AA-00855/	x_refsource_CONFIRM
http://www.isc.org/software/bind/advisories/cve-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2693-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2013-0550.html	vendor-advisoryx_refsource_REDHAT

Date Public

2013-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:14:16.416Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.isc.org/article/AA-00855/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
          },
          {
            "name": "USN-2693-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2693-1"
          },
          {
            "name": "RHSA-2013:0550",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-08-24T13:57:02.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.isc.org/article/AA-00855/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
        },
        {
          "name": "USN-2693-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2693-1"
        },
        {
          "name": "RHSA-2013:0550",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-5689",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/article/AA-00855/",
              "refsource": "CONFIRM",
              "url": "https://kb.isc.org/article/AA-00855/"
            },
            {
              "name": "http://www.isc.org/software/bind/advisories/cve-2012-5689",
              "refsource": "CONFIRM",
              "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
            },
            {
              "name": "USN-2693-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2693-1"
            },
            {
              "name": "RHSA-2013:0550",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-5689",
    "datePublished": "2013-01-25T11:00:00.000Z",
    "dateReserved": "2012-10-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:14:16.416Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-5689",
      "date": "2026-10-03",
      "epss": "0.12036",
      "percentile": "0.96023"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2B96B87-F18C-41EF-9A37-7D0842433A4E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:*",
                    "matchCriteriaId": "AFA1AA14-4D4A-45D0-9573-D53C0FFFFF78",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:*",
                    "matchCriteriaId": "F5DE1274-F7A1-4F12-A4F5-1CB1DD5B84E1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:*",
                    "matchCriteriaId": "401A7E61-AC3D-417D-97B8-E5E736DC6FCC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "C7C37F7D-DD28-4C70-A534-A3F434DF4273",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:*",
                    "matchCriteriaId": "B2EC1F99-85C1-4081-A118-790111741246",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "85D6C9B7-9D5D-4589-AC83-E6ECB535EBFD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "043A5E3F-529B-4A9A-8531-184EE6D1942D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "673057D5-256C-4933-B56F-4BF8848323F1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "C2CE371B-E399-4D74-B46C-3606E4BDA53A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6A3798A1-134C-4066-A012-10C15F103EAC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "9CA1AEBE-040C-483A-9850-7DA888FF8075",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.1:p2:*:*:*:*:*:*",
                    "matchCriteriaId": "B9A33F04-3240-4268-B613-C4876770A30F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.9.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "91DA33F1-CA29-4EB1-8F95-8CEA71383BF4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF83BB87-B203-48F9-9D06-48A5FE399050",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4.z:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF3F4527-8ADB-4A45-9E2C-C6E45D637D14",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4EBDD71E-6F17-4EB6-899F-E27A93CDFDF2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:*",
                    "matchCriteriaId": "811D03B2-96A8-47F9-80BE-54228A4108EC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "B3D4393C-1151-49F9-963B-B6FD88E93814",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "25855A5C-302F-4A82-AEC1-8C4C9CB70362",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:*",
                    "matchCriteriaId": "03E68ACA-0288-4EE5-9250-54711B2E6670",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:*",
                    "matchCriteriaId": "8D717D3D-F4BF-470B-AC2B-D1234A7303EB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "66D259B7-4F9E-43B2-BB1D-3B097D3CDB28",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4F9DA20E-57EA-49A0-9DB2-E9E0191EC1AB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "FCC604FD-A834-4BA7-B1E2-1FCB6A583204",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:*",
                    "matchCriteriaId": "479D3C6C-1FD7-4DBE-A841-4B58400A89F1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:*",
                    "matchCriteriaId": "BAF29160-63C2-40D0-BE08-3C8181CD5092",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "8DAA3942-0979-4D33-BD52-EF7F0403DFBD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "39D75F93-B6A7-4D25-8147-25F7F867E5B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "B046CE1D-03E1-462F-9762-9269E59BD554",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "DAC9049D-6284-40F7-9E97-596FEDF9EEDA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "10D06B47-911B-4095-ABD2-DDD38E6306F3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59428551-218B-4C32-982F-DCDC894E2954",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "961E22DC-1467-4A0C-9450-A2E047FCFCFD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:*",
                    "matchCriteriaId": "DF77CAF5-A8D6-4479-9C4D-A698D26BDC6A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD318FF1-320B-4311-AF7E-988C023B4938",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
          },
          {
            "lang": "es",
            "value": "ISC BIND v9.8.x hasta 9.8.4-P1 y v9.9.x hasta v9.9.2-P1, en ??ciertas configuraciones que implican DNS64 con una zona de pol\u00edtica de respuesta que carece de una regla de reescritura AAAA, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (aserci\u00f3n fracaso y salida llamado demonio) a trav\u00e9s de una consulta para un registro AAAA."
          }
        ],
        "id": "CVE-2012-5689",
        "lastModified": "2026-06-16T23:47:15.370",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.1,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 6.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2013-01-25T12:00:46.087",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2693-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.isc.org/article/AA-00855/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2693-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.isc.org/article/AA-00855/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T12:47:09+00:00",
      "cve": "CVE-2012-5689",
      "id": "CVE-2012-5689",
      "initial_release_date": "2012-01-01T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_not_affected": "3",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "bind: denial of service when processing queries and with both DNS64 and RPZ enabled",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5689.json",
      "version": "3"
    }
  }
}

CERTA-2013-AVI-069

Vulnerability from certfr_avis - Published: 2013-01-28 - Updated: 2013-01-28

Une vulnérabilité a été corrigée dans ISC BIND. Elle permet à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	ISC	BIND	ISC BIND de la version 9.9.0 à la version 9.9.2-P1
	ISC	BIND	ISC BIND de la version 9.8.0 à la version 9.8.4-P1

References

Title

Publication Time

EUVD-2026-113231

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:30

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:30:48.362723+00:00",
  "id": "EUVD-2026-113231"
}

FKIE_CVE-2012-5689

Vulnerability from fkie_nvd - Published: 2013-01-25 12:00 - Updated: 2026-06-16 23:47

Severity

Summary

References

URL	Tags
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2013-0550.html	Third Party Advisory
cve@mitre.org	http://www.isc.org/software/bind/advisories/cve-2012-5689	Vendor Advisory
cve@mitre.org	http://www.ubuntu.com/usn/USN-2693-1	Third Party Advisory
cve@mitre.org	https://kb.isc.org/article/AA-00855/	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2013-0550.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.isc.org/software/bind/advisories/cve-2012-5689	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2693-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://kb.isc.org/article/AA-00855/	Vendor Advisory

Impacted products

Vendor	Product	Version
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.0
isc	bind	9.9.1
isc	bind	9.9.1
isc	bind	9.9.1
isc	bind	9.9.2
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_hpc_node	6.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_server_eus	6.4.z
redhat	enterprise_linux_workstation	6.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.0
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.1
isc	bind	9.8.2
isc	bind	9.8.2
isc	bind	9.8.2
isc	bind	9.8.3
isc	bind	9.8.3
isc	bind	9.8.3
isc	bind	9.8.4
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.04

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2B96B87-F18C-41EF-9A37-7D0842433A4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:*",
              "matchCriteriaId": "AFA1AA14-4D4A-45D0-9573-D53C0FFFFF78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:*",
              "matchCriteriaId": "F5DE1274-F7A1-4F12-A4F5-1CB1DD5B84E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:*",
              "matchCriteriaId": "401A7E61-AC3D-417D-97B8-E5E736DC6FCC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:*",
              "matchCriteriaId": "C7C37F7D-DD28-4C70-A534-A3F434DF4273",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:*",
              "matchCriteriaId": "B2EC1F99-85C1-4081-A118-790111741246",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "85D6C9B7-9D5D-4589-AC83-E6ECB535EBFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "043A5E3F-529B-4A9A-8531-184EE6D1942D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "673057D5-256C-4933-B56F-4BF8848323F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "C2CE371B-E399-4D74-B46C-3606E4BDA53A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A3798A1-134C-4066-A012-10C15F103EAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:*",
              "matchCriteriaId": "9CA1AEBE-040C-483A-9850-7DA888FF8075",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.1:p2:*:*:*:*:*:*",
              "matchCriteriaId": "B9A33F04-3240-4268-B613-C4876770A30F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "91DA33F1-CA29-4EB1-8F95-8CEA71383BF4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF83BB87-B203-48F9-9D06-48A5FE399050",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4.z:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF3F4527-8ADB-4A45-9E2C-C6E45D637D14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EBDD71E-6F17-4EB6-899F-E27A93CDFDF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:*",
              "matchCriteriaId": "811D03B2-96A8-47F9-80BE-54228A4108EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:*",
              "matchCriteriaId": "B3D4393C-1151-49F9-963B-B6FD88E93814",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
              "matchCriteriaId": "25855A5C-302F-4A82-AEC1-8C4C9CB70362",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:*",
              "matchCriteriaId": "03E68ACA-0288-4EE5-9250-54711B2E6670",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:*",
              "matchCriteriaId": "8D717D3D-F4BF-470B-AC2B-D1234A7303EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "66D259B7-4F9E-43B2-BB1D-3B097D3CDB28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F9DA20E-57EA-49A0-9DB2-E9E0191EC1AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:*",
              "matchCriteriaId": "FCC604FD-A834-4BA7-B1E2-1FCB6A583204",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:*",
              "matchCriteriaId": "479D3C6C-1FD7-4DBE-A841-4B58400A89F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:*",
              "matchCriteriaId": "BAF29160-63C2-40D0-BE08-3C8181CD5092",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:*",
              "matchCriteriaId": "8DAA3942-0979-4D33-BD52-EF7F0403DFBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "39D75F93-B6A7-4D25-8147-25F7F867E5B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:*",
              "matchCriteriaId": "B046CE1D-03E1-462F-9762-9269E59BD554",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "DAC9049D-6284-40F7-9E97-596FEDF9EEDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "10D06B47-911B-4095-ABD2-DDD38E6306F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "59428551-218B-4C32-982F-DCDC894E2954",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:*",
              "matchCriteriaId": "961E22DC-1467-4A0C-9450-A2E047FCFCFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:*",
              "matchCriteriaId": "DF77CAF5-A8D6-4479-9C4D-A698D26BDC6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD318FF1-320B-4311-AF7E-988C023B4938",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
    },
    {
      "lang": "es",
      "value": "ISC BIND v9.8.x hasta 9.8.4-P1 y v9.9.x hasta v9.9.2-P1, en ??ciertas configuraciones que implican DNS64 con una zona de pol\u00edtica de respuesta que carece de una regla de reescritura AAAA, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (aserci\u00f3n fracaso y salida llamado demonio) a trav\u00e9s de una consulta para un registro AAAA."
    }
  ],
  "id": "CVE-2012-5689",
  "lastModified": "2026-06-16T23:47:15.370",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-01-25T12:00:46.087",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2693-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://kb.isc.org/article/AA-00855/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2693-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://kb.isc.org/article/AA-00855/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-9253-PF7V-J2VX

Vulnerability from github – Published: 2022-05-17 03:50 – Updated: 2025-04-11 04:06

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2012-5689"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-01-25T12:00:00Z",
    "severity": "HIGH"
  },
  "details": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.",
  "id": "GHSA-9253-pf7v-j2vx",
  "modified": "2025-04-11T04:06:47Z",
  "published": "2022-05-17T03:50:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5689"
    },
    {
      "type": "WEB",
      "url": "https://kb.isc.org/article/AA-00855"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
    },
    {
      "type": "WEB",
      "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2693-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2012-5689

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2012-5689

Aliases

CVE-2012-5689

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2012-5689",
    "description": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.",
    "id": "GSD-2012-5689",
    "references": [
      "https://www.suse.com/security/cve/CVE-2012-5689.html",
      "https://access.redhat.com/errata/RHSA-2013:0550",
      "https://ubuntu.com/security/CVE-2012-5689",
      "https://alas.aws.amazon.com/cve/html/CVE-2012-5689.html",
      "https://linux.oracle.com/cve/CVE-2012-5689.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2012-5689"
      ],
      "details": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.",
      "id": "GSD-2012-5689",
      "modified": "2023-12-13T01:20:19.903989Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2012-5689",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://kb.isc.org/article/AA-00855/",
            "refsource": "CONFIRM",
            "url": "https://kb.isc.org/article/AA-00855/"
          },
          {
            "name": "http://www.isc.org/software/bind/advisories/cve-2012-5689",
            "refsource": "CONFIRM",
            "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
          },
          {
            "name": "USN-2693-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2693-1"
          },
          {
            "name": "RHSA-2013:0550",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.1:p2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.9.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4.z:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.3:p2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.2:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.2:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.2:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.3:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-5689"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/article/AA-00855/",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://kb.isc.org/article/AA-00855/"
            },
            {
              "name": "http://www.isc.org/software/bind/advisories/cve-2012-5689",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.isc.org/software/bind/advisories/cve-2012-5689"
            },
            {
              "name": "RHSA-2013:0550",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0550.html"
            },
            {
              "name": "USN-2693-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-2693-1"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2016-08-19T18:31Z",
      "publishedDate": "2013-01-25T12:00Z"
    }
  }
}

OPENSUSE-SU-2024:10467-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 19:59

Summary

bind-9.10.3P4-21.1 on GA media

Severity

Moderate

Scope

37 vulnerabilities in this advisory, including CVE-2012-5689.

CVE-2012-5689

Recommended: 124 products

Open the full advisory

RHSA-2013:0550

Vulnerability from csaf_redhat - Published: 2013-02-21 19:06 - Updated: 2026-06-25 10:39

Summary

Red Hat Security Advisory: bind security and enhancement update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2012-5689.

CVE-2012-5689

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Fixed: 92 products

https://access.redhat.com/errata/RHSA-2013:0550

Open the full advisory

UBUNTU-CVE-2012-5689 (CVE-2012-5689)

Vulnerability from osv_ubuntu – Published: 2013-01-25 00:00 – Updated: 2025-07-16 04:50 – Source website

Withdrawn 2025-07-18

Details

Severity

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2012-5689	REPORT
	https://kb.isc.org/article/AA-00855/	REPORT
	https://ubuntu.com/security/notices/USN-2693-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2012-5689	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "bind9-doc",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libbind-dev",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libbind9-90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libdns100",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libisc95",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libisccc90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "libisccfg90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "liblwres90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.9.5.dfsg-3ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.3.dfsg.P2-4ubuntu1",
        "1:9.9.3.dfsg.P2-4ubuntu2",
        "1:9.9.3.dfsg.P2-4ubuntu3",
        "1:9.9.5.dfsg-2",
        "1:9.9.5.dfsg-3"
      ]
    }
  ],
  "aliases": [],
  "details": "ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.",
  "id": "UBUNTU-CVE-2012-5689",
  "modified": "2025-07-16T04:50:09Z",
  "published": "2013-01-25T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2012-5689"
    },
    {
      "type": "REPORT",
      "url": "https://kb.isc.org/article/AA-00855/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2693-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5689"
    }
  ],
  "related": [
    "USN-2693-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2012-5689"
  ],
  "withdrawn": "2025-07-18T16:42:48Z"
}

WID-SEC-W-2025-1174

Vulnerability from csaf_certbund - Published: 2013-01-24 23:00 - Updated: 2025-05-29 22:00

Summary

Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial Of Service

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2012-5689.

CVE-2012-5689

Known affected: 9 products Last affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2012-5689 (GCVE-0-2012-5689)

Solution

UBUNTU-CVE-2012-5689 (CVE-2012-5689)

Tags

Sightings

Nomenclature

Related by attack behaviour