What’s Vulnerable › Vulnerabilities

CVE-2012-5689

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-01-25 · updated 2026-06-16
• Weakness: CWE-20

Description

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 15.04
• ISC BIND: 9.9.0, 9.9.0-a1, 9.9.0-a2, 9.9.0-a3, 9.9.0-b1, 9.9.0-b2 (+28)
• RedHat Enterprise Linux Desktop: 6.0
• RedHat Enterprise Linux Hpc Node: 6.0
• RedHat Enterprise Linux Server: 6.0
• RedHat Enterprise Linux Server Aus: 6.4
• RedHat Enterprise Linux Server Eus: 6.4.z
• RedHat Enterprise Linux Workstation: 6.0

References

• http://rhn.redhat.com/errata/RHSA-2013-0550.html
• http://www.isc.org/software/bind/advisories/cve-2012-5689
• http://www.ubuntu.com/usn/USN-2693-1
• https://kb.isc.org/article/AA-00855/
• http://rhn.redhat.com/errata/RHSA-2013-0550.html
• http://www.isc.org/software/bind/advisories/cve-2012-5689
• http://www.ubuntu.com/usn/USN-2693-1
• https://kb.isc.org/article/AA-00855/

Get alerted when CVE-2012-5689 or the next vulnerability affects your stack