CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

• CWE-20

• http://rhn.redhat.com/errata/RHSA-2013-0550.htmlThird Party Advisory
• http://www.isc.org/software/bind/advisories/cve-2012-5689Vendor Advisory
• http://www.ubuntu.com/usn/USN-2693-1Third Party Advisory
• https://kb.isc.org/article/AA-00855/Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0550.htmlThird Party Advisory
• http://www.isc.org/software/bind/advisories/cve-2012-5689Vendor Advisory
• http://www.ubuntu.com/usn/USN-2693-1Third Party Advisory
• https://kb.isc.org/article/AA-00855/Vendor Advisory

Published

Jan 25, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5683Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-5684Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 an…
• CVE-2012-5685SQL injection vulnerability in ZPanel 10.0.1 and earlier all…
• CVE-2012-5686ZPanel 10.0.1 has insufficient entropy for its password rese…9.8
• CVE-2012-5687Directory traversal vulnerability in the web-based managemen…
• CVE-2012-5688ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, wh…
• CVE-2012-5690RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP …
• CVE-2012-5691Buffer overflow in RealNetworks RealPlayer before 16.0.0.282…
• CVE-2012-5692Unspecified vulnerability in admin/sources/base/core.php in …
• CVE-2012-5693Bulb Security Smartphone Pentest Framework (SPF) before 0.1.…8.8
• CVE-2012-5694Multiple SQL injection vulnerabilities in Bulb Security Smar…
• CVE-2012-5695Multiple cross-site request forgery (CSRF) vulnerabilities i…