Lucene search
AmazonALAS-2012-124HistorySep 22, 2012 - 9:34 p.m.
Important: bind
2012-09-2221:34:00
alas.aws.amazon.com
22
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.331
Percentile
97.1%
Issue Overview:
A flaw was found in the way BIND handled resource records with a large RDATA value. A malicious owner of a DNS domain could use this flaw to create specially-crafted DNS resource records, that would cause a recursive resolver or secondary server to exit unexpectedly with an assertion failure. (CVE-2012-4244)
Affected Packages:
bind
Issue Correction:
Run yum update bind to update your system.
New Packages:
i686:
bind-9.8.2-0.10.rc1.24.amzn1.i686
bind-libs-9.8.2-0.10.rc1.24.amzn1.i686
bind-chroot-9.8.2-0.10.rc1.24.amzn1.i686
bind-sdb-9.8.2-0.10.rc1.24.amzn1.i686
bind-utils-9.8.2-0.10.rc1.24.amzn1.i686
bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.i686
bind-devel-9.8.2-0.10.rc1.24.amzn1.i686
src:
bind-9.8.2-0.10.rc1.24.amzn1.src
x86_64:
bind-utils-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-devel-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-chroot-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-sdb-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-libs-9.8.2-0.10.rc1.24.amzn1.x86_64
bind-9.8.2-0.10.rc1.24.amzn1.x86_64
Additional References
Red Hat: CVE-2012-4244
Mitre: CVE-2012-4244
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | bind | < 9.8.2-0.10.rc1.24.amzn1 | bind-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-libs | < 9.8.2-0.10.rc1.24.amzn1 | bind-libs-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-chroot | < 9.8.2-0.10.rc1.24.amzn1 | bind-chroot-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-sdb | < 9.8.2-0.10.rc1.24.amzn1 | bind-sdb-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-utils | < 9.8.2-0.10.rc1.24.amzn1 | bind-utils-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-debuginfo | < 9.8.2-0.10.rc1.24.amzn1 | bind-debuginfo-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-devel | < 9.8.2-0.10.rc1.24.amzn1 | bind-devel-9.8.2-0.10.rc1.24.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | bind-utils | < 9.8.2-0.10.rc1.24.amzn1 | bind-utils-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind-devel | < 9.8.2-0.10.rc1.24.amzn1 | bind-devel-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind-chroot | < 9.8.2-0.10.rc1.24.amzn1 | bind-chroot-9.8.2-0.10.rc1.24.amzn1.x86_64.rpm |
Related
openvas
openvas
CentOS Update for bind97 CESA-2012:1266 centos5
2012-09-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:1199-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 2547-1 (bind9)
2012-09-15 00:00:00
nessus
nessus
Debian DSA-2547-1 : bind9 - improper assert
2012-09-13 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : bind9 vulnerability (USN-1566-1)
2012-09-14 00:00:00
Oracle Solaris Third-Party Patch Update : bind (cve_2012_4244_denial_of)
2015-01-19 00:00:00
centos
centos
bind, caching security update
2012-09-14 10:33:14
bind97 security update
2012-09-14 10:09:49
bind security update
2012-09-14 11:25:59
fedora
fedora
[SECURITY] Fedora 18 Update: bind-9.9.1-10.P3.fc18
2012-09-23 04:55:51
[SECURITY] Fedora 17 Update: bind-9.9.1-9.P3.fc17
2012-09-23 03:28:42
[SECURITY] Fedora 16 Update: bind-9.8.3-4.P3.fc16
2012-09-27 04:33:00
debian
debian
[SECURITY] [DSA 2547-1] bind9 security update
2012-09-12 20:07:48
redhat
redhat
(RHSA-2012:1266) Important: bind97 security update
2012-09-14 00:00:00
(RHSA-2012:1268) Important: bind security update
2012-09-14 00:00:00
(RHSA-2012:1267) Important: bind security and bug fix update
2012-09-14 00:00:00
suse
suse
Security update for bind (critical)
2012-10-13 06:09:20
Security update for bind (critical)
2012-09-18 02:08:27
bind: fixed a remote denial of service attack (abort) (critical)
2012-09-17 19:08:37
ubuntu
ubuntu
Bind vulnerability
2012-09-13 00:00:00
cve
cve
CVE-2012-4244
2012-09-14 10:33:21
nvd
nvd
CVE-2012-4244
2012-09-14 10:33:21
cvelist
cvelist
CVE-2012-4244
2012-09-14 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 08:57:26
oraclelinux
oraclelinux
bind security update
2012-09-14 00:00:00
bind97 security update
2012-09-14 00:00:00
bind security and bug fix update
2012-09-14 00:00:00
debiancve
debiancve
CVE-2012-4244
2012-09-14 10:33:21
securityvulns
securityvulns
ISC bind DoS
2012-09-18 00:00:00
[USN-1566-1] Bind vulnerability
2012-09-18 00:00:00
prion
prion
Design/Logic Flaw
2012-09-14 10:33:00
ubuntucve
ubuntucve
CVE-2012-4244
2012-09-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:06.bind
2012-11-22 00:00:00
checkpoint_advisories
checkpoint_advisories
f5
f5
SOL14201 - BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2013-02-11 00:00:00
K14201 : BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2014-08-26 00:00:00
freebsd
freebsd
FreeBSD -- Multiple Denial of Service vulnerabilities with named(8)
2012-11-22 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2012-09-24 00:00:00
threatpost
threatpost
Six Security Flaws Fixed in BIND 9.9.2
2012-12-05 16:15:32
vmware
vmware
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.331
Percentile
97.1%
Related for ALAS-2012-124