CVE-2012-5688
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote...
CVE-2012-5688 is a high vulnerability (CVSS 7.8) in Isc Bind, published December 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.9%, the 95th percentile. Fixed in bind9 1:9.8.4.dfsg.P1-1.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 10.9%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:9.8.4.dfsg.P1-1bind9 +31 more
Description
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind9Debian:12 | before 1:9.8.4.dfsg.P1-1 | 1:9.8.4.dfsg.P1-1 |
bind9Debian:13 | before 1:9.8.4.dfsg.P1-1 | 1:9.8.4.dfsg.P1-1 |
bind9Debian:14 | before 1:9.8.4.dfsg.P1-1 | 1:9.8.4.dfsg.P1-1 |
bindRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-debuginfoRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-libsRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-utilsRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-chrootRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-develRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-sdbRed Hat:enterprise_linux:6::client | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bindRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-debuginfoRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-libsRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-utilsRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-chrootRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-develRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-sdbRed Hat:enterprise_linux:6::computenode | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bindRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-chrootRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-debuginfoRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-libsRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-utilsRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-develRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-sdbRed Hat:enterprise_linux:6::server | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bindRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-chrootRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-debuginfoRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-libsRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-utilsRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-develRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bind-sdbRed Hat:enterprise_linux:6::workstation | before 32:9.8.2-0.10.rc1.el6_3.6 | 32:9.8.2-0.10.rc1.el6_3.6 |
bindopenSUSE:Tumbleweed From an advisory covering 37 CVEs | before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
What each source reports
NVD Score used
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
CVE-2012-5688- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
CVE-2012-5688- Updated
- 2026-11-02
EUVDEUVD-2012-5571No score
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
EUVD-2012-5571- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vf43-m8wx-8xfhNo score
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote...
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
GHSA-vf43-m8wx-8xfh- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
CVE-2012-5688- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5688No score
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- Record
DEBIAN-CVE-2012-5688- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2012-1549.html
slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
ubuntu.com/usn/USN-1657-1
kb.isc.org/article/AA-00828
support.apple.com/kb/HT5880
Show 47 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-5688
github.com/advisories/GHSA-vf43-m8wx-8xfh
security-tracker.debian.org/tracker/CVE-2012-5688
access.redhat.com/errata/RHSA-2012:1549
isc.org/software/bind/advisories/cve-2012-5688
bugzilla.redhat.com/show_bug.cgi?id=883533
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1549.json
cve.org/CVERecord?id=CVE-2012-5688
suse.com/security/cve/CVE-2009-0696