bind: denial of service [LWN.net]

Package(s):

bind

CVE #(s):

CVE-2012-5689

Created:

February 22, 2013

Updated:

March 11, 2013

Description:

From the CVE entry:

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

Alerts:

Red Hat	RHSA-2013:0550-01	2013-02-21
Oracle	ELSA-2013-0550	2013-02-28
Scientific Linux	SL-bind-20130228	2013-02-28
CentOS	CESA-2013:0550	2013-03-09
Mageia	MGASA-2013-0105	2013-04-04

(Log in to post comments)