ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
BID:56817
Info
ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
| Bugtraq ID: | 56817 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2012-5688 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 04 2012 12:00AM |
| Updated: | Apr 13 2015 10:12PM |
| Credit: | BlueCat Networks |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 ISC Bind 9.8.4 ISC Bind 9.8 ISC Bind 9.9.2 ISC Bind 9.9.1-P4 ISC Bind 9.9.1-P3 ISC Bind 9.9.1-P2 ISC Bind 9.9.1-P1 ISC Bind 9.9.1 ISC Bind 9.9.0 ISC Bind 9.8.3-P4 ISC Bind 9.8.3-P3 ISC Bind 9.8.3-P2 ISC Bind 9.8.3-P1 ISC Bind 9.8.3 ISC Bind 9.8.1-P1 ISC Bind 9.8.0-P4 ISC Bind 9.8.0-P3 ISC Bind 9.8.0-P2 ISC Bind 9.8.0-P1 Gentoo Linux FreeBSD FreeBSD 9.1-RC2 FreeBSD FreeBSD 9.1--RELENG FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0-STABLE FreeBSD FreeBSD 9.0-RELEASE FreeBSD FreeBSD 9.0-RC3 FreeBSD FreeBSD 9.0-RC1 FreeBSD FreeBSD 9.0--RELENG FreeBSD FreeBSD 9.0 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8.3 Apple Mac OS X 10.8 |
| Not Vulnerable: |
ISC Bind 9.9.2-P1 ISC Bind 9.8.4-P1 FreeBSD FreeBSD 9.1-STABLE FreeBSD FreeBSD 9.1-RELENG FreeBSD FreeBSD 9.1-RELEASE-p1 FreeBSD FreeBSD 9.0-RELENG FreeBSD FreeBSD 9.0-RELEASE-p6 Apple Mac OS X 10.8.5 |
Discussion
ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
ISC BIND is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
The following are affected:
ISC BIND 9.8.0 through versions 9.8.4
ISC BIND 9.9.0 through versions 9.9.2
ISC BIND is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
The following are affected:
ISC BIND 9.8.0 through versions 9.8.4
ISC BIND 9.9.0 through versions 9.9.2
Exploit / POC
ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X 10.8.3
Apple Mac OS X 10.8
Mandriva Linux Mandrake 2011 x86_64
Mandriva Linux Mandrake 2011
Apple Mac OS X 10.8.4
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X 10.8.3
-
Apple OSXUpdCombo10.8.5.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.8
-
Apple OSXUpdCombo10.8.5.dmg
http://www.apple.com/support/downloads/
Mandriva Linux Mandrake 2011 x86_64
-
Mandriva bind-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-devel-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-doc-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-utils-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2011
-
Mandriva bind-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-devel-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-doc-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva bind-utils-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/
Apple Mac OS X 10.8.4
-
Apple OSXUpd10.8.5.dmg
http://www.apple.com/support/downloads/