CVE-2012-5689

NameCVE-2012-5689
DescriptionISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs699145

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
bind9 (PTS)bullseye (security), bullseye1:9.16.48-1fixed
bookworm, bookworm (security)1:9.18.24-1fixed
trixie1:9.19.24-185-g392e7199df2-1fixed
sid1:9.20.0-1fixed
isc-dhcp (PTS)bullseye4.4.1-2.3+deb11u2fixed
bullseye (security)4.4.1-2.3+deb11u1fixed
bookworm4.4.3-P1-2fixed
sid, trixie4.4.3-P1-5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
bind9sourcesqueeze(not affected)
bind9source(unstable)1:9.8.4.dfsg.P1-6+nmu1699145
isc-dhcpsource(unstable)(not affected)

Notes

[squeeze] - bind9 <not-affected> (Only affects Bind 9.8 and 9.9)
- isc-dhcp <not-affected> (issue only affects the named service, which isn't used by isc-dhcp)

Search for package or bug name: Reporting problems