ISC BIND DNS64 REQUIRE Assertion Failure Denial of Service Vulnerability

Last Update Date: 7 Dec 2012 Release Date: 6 Dec 2012 5392 Views

RISK: Medium Risk

TYPE: Servers - Network Management

A vulnerability has been identified in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the DNS64 IPv6 transition mechanism when handling certain queries, which can be exploited to trigger a REQUIRE assertion and crash the server via a specially crafted DNS query.

Successful exploitation requires that DNS64 is turned on.

Impact

Denial of Service

System / Technologies affected

ISC BIND 9.8.x
ISC BIND 9.9.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 9.8.4-P1 or 9.9.2-P1.

Vulnerability Identifier

CVE-2012-5688

Source

Secunia