Vulnerability Details CVE-2012-5688
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.13
EPSS Ranking 93.7%
CVSS Severity
CVSS v2 Score 7.8
References
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2012-1549.html
- http://support.apple.com/kb/HT5880
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
- http://www.ubuntu.com/usn/USN-1657-1
- https://kb.isc.org/article/AA-00828
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2012-1549.html
- http://support.apple.com/kb/HT5880
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
- http://www.ubuntu.com/usn/USN-1657-1
- https://kb.isc.org/article/AA-00828
Products affected by CVE-2012-5688
-
cpe:2.3:a:isc:bind:9.8.0
-
cpe:2.3:a:isc:bind:9.8.1
-
cpe:2.3:a:isc:bind:9.8.2
-
cpe:2.3:a:isc:bind:9.8.3
-
cpe:2.3:a:isc:bind:9.9.0
-
cpe:2.3:a:isc:bind:9.9.1
-
cpe:2.3:o:canonical:ubuntu_linux:12.04
-
cpe:2.3:o:canonical:ubuntu_linux:12.10