Upstream information

CVE-2012-5688 at MITRE

Description

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 7.79
Vector AV:N/AC:L/Au:N/C:N/I:N/A:C
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
SUSE Bugzilla entry: 792926 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 12
  • bind-libs >= 9.9.5P1-1.10
  • bind-libs-32bit >= 9.9.5P1-1.10
  • bind-utils >= 9.9.5P1-1.10
Patchnames:
SUSE Linux Enterprise Desktop 12 GA bind-libs-32bit
SUSE Linux Enterprise Desktop 12 SP1
  • bind-libs >= 9.9.6P1-30.2
  • bind-libs-32bit >= 9.9.6P1-30.2
  • bind-utils >= 9.9.6P1-30.2
Patchnames:
SUSE Linux Enterprise Desktop 12 SP1 GA bind-libs-32bit
SUSE Linux Enterprise Desktop 12 SP2
  • bind-libs >= 9.9.9P1-46.1
  • bind-libs-32bit >= 9.9.9P1-46.1
  • bind-utils >= 9.9.9P1-46.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA bind-libs-32bit
SUSE Linux Enterprise Server 12
  • bind >= 9.9.5P1-1.7
  • bind-chrootenv >= 9.9.5P1-1.7
  • bind-doc >= 9.9.5P1-1.7
  • bind-libs >= 9.9.5P1-1.7
  • bind-libs-32bit >= 9.9.5P1-1.10
  • bind-utils >= 9.9.5P1-1.7
Patchnames:
SUSE Linux Enterprise Server 12 GA bind
SUSE Linux Enterprise Server 12 SP1
  • bind >= 9.9.6P1-30.2
  • bind-chrootenv >= 9.9.6P1-30.2
  • bind-doc >= 9.9.6P1-30.2
  • bind-libs >= 9.9.6P1-30.2
  • bind-libs-32bit >= 9.9.6P1-30.2
  • bind-utils >= 9.9.6P1-30.2
Patchnames:
SUSE Linux Enterprise Server 12 SP1 GA bind
SUSE Linux Enterprise Server 12 SP2
  • bind >= 9.9.9P1-46.1
  • bind-chrootenv >= 9.9.9P1-46.1
  • bind-doc >= 9.9.9P1-46.1
  • bind-libs >= 9.9.9P1-46.1
  • bind-libs-32bit >= 9.9.9P1-46.1
  • bind-utils >= 9.9.9P1-46.1
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA bind
SUSE Linux Enterprise Software Development Kit 12
  • bind-devel >= 9.9.5P1-1.10
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 GA bind-devel
SUSE Linux Enterprise Software Development Kit 12 SP1
  • bind-devel >= 9.9.6P1-30.2
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP1 GA bind-devel
SUSE Linux Enterprise Software Development Kit 12 SP2
  • bind-devel >= 9.9.9P1-46.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA bind-devel
openSUSE 13.2
  • bind >= 9.9.5P1-2.2.2
  • bind-chrootenv >= 9.9.5P1-2.2.2
  • bind-doc >= 9.9.5P1-2.2.2
  • bind-libs >= 9.9.5P1-2.2.2
  • bind-utils >= 9.9.5P1-2.2.2
Patchnames:
openSUSE 13.2 GA bind
openSUSE Evergreen 11.4
  • bind >= 9.9.2P2-45.1
  • bind-chrootenv >= 9.9.2P2-45.1
  • bind-debuginfo >= 9.9.2P2-45.1
  • bind-debugsource >= 9.9.2P2-45.1
  • bind-devel >= 9.9.2P2-45.1
  • bind-doc >= 9.9.2P2-45.1
  • bind-libs >= 9.9.2P2-45.1
  • bind-libs-32bit >= 9.9.2P2-45.1
  • bind-libs-debuginfo >= 9.9.2P2-45.1
  • bind-libs-debuginfo-32bit >= 9.9.2P2-45.1
  • bind-libs-debuginfo-x86 >= 9.9.2P2-45.1
  • bind-libs-x86 >= 9.9.2P2-45.1
  • bind-lwresd >= 9.9.2P2-45.1
  • bind-lwresd-debuginfo >= 9.9.2P2-45.1
  • bind-utils >= 9.9.2P2-45.1
  • bind-utils-debuginfo >= 9.9.2P2-45.1
Patchnames:
2013-67
openSUSE Leap 42.1
  • bind >= 9.9.6P1-25.2
  • bind-chrootenv >= 9.9.6P1-25.2
  • bind-doc >= 9.9.6P1-25.2
  • bind-libs >= 9.9.6P1-25.2
  • bind-utils >= 9.9.6P1-25.2
Patchnames:
openSUSE Leap 42.1 GA bind
openSUSE Leap 42.2
  • bind >= 9.9.9P1-41.1
  • bind-chrootenv >= 9.9.9P1-41.1
  • bind-doc >= 9.9.9P1-41.1
  • bind-libs >= 9.9.9P1-41.1
  • bind-utils >= 9.9.9P1-41.1
Patchnames:
openSUSE Leap 42.2 GA bind
openSUSE Tumbleweed
  • bind >= 9.10.3P4-21.1
  • bind-chrootenv >= 9.10.3P4-21.1
  • bind-devel >= 9.10.3P4-21.1
  • bind-devel-32bit >= 9.10.3P4-21.1
  • bind-doc >= 9.10.3P4-21.1
  • bind-lwresd >= 9.10.3P4-21.1
  • bind-utils >= 9.10.3P4-21.1
  • idnkit >= 1.0-21.1
  • idnkit-devel >= 1.0-21.1
  • idnkit-devel-32bit >= 1.0-21.1
  • libbind9-140 >= 9.10.3P4-21.1
  • libbind9-140-32bit >= 9.10.3P4-21.1
  • libdns162 >= 9.10.3P4-21.1
  • libdns162-32bit >= 9.10.3P4-21.1
  • libidnkit1 >= 1.0-21.1
  • libidnkit1-32bit >= 1.0-21.1
  • libidnkitlite1 >= 1.0-21.1
  • libidnkitlite1-32bit >= 1.0-21.1
  • libidnkitres1 >= 1.0-21.1
  • libidnkitres1-32bit >= 1.0-21.1
  • libirs-devel >= 9.10.3P4-21.1
  • libirs141 >= 9.10.3P4-21.1
  • libirs141-32bit >= 9.10.3P4-21.1
  • libisc160 >= 9.10.3P4-21.1
  • libisc160-32bit >= 9.10.3P4-21.1
  • libisccc140 >= 9.10.3P4-21.1
  • libisccc140-32bit >= 9.10.3P4-21.1
  • libisccfg140 >= 9.10.3P4-21.1
  • libisccfg140-32bit >= 9.10.3P4-21.1
  • liblwres141 >= 9.10.3P4-21.1
  • liblwres141-32bit >= 9.10.3P4-21.1
Patchnames:
openSUSE Tumbleweed GA bind