CVE-2012-5688: canonical ubuntu_linux Improper Input Validation
CVSS: 7.8v2.0HighModified
AliasesRHSA-2012:1549DEBIAN-CVE-2012-5688
Published 06-12-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-5688 is a high (CVSS 7.8) Improper Input Validation vulnerability in canonical ubuntu_linux. EPSS estimates a 10.90% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v2.0 (NVD)EPSS score
10.90%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 06-12-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
10.90%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.90% on 19-09-2026
19-09-202619-10-2026
EPSS score10.90%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- bind< 32:9.8.2-0.10.rc1.el6_3.6
- bind-chroot< 32:9.8.2-0.10.rc1.el6_3.6
- bind-debuginfo< 32:9.8.2-0.10.rc1.el6_3.6
- bind-devel< 32:9.8.2-0.10.rc1.el6_3.6
- bind-libs< 32:9.8.2-0.10.rc1.el6_3.6
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10
Debian1 product
- bind9< 1:9.8.4.dfsg.P1-1
Isc1 product
- bind9.8.0 | 9.8.0:a1 | 9.8.0:b1 | 9.8.0:p1 | 9.8.0:p2 | 9.8.0:p4 | 9.8.0:rc1 | 9.8.1 | 9.8.1:b1 | 9.8.1:b2 | 9.8.1:b3 | 9.8.1:p1 | 9.8.1:rc1 | 9.8.2 | 9.8.2:b1 | 9.8.2:rc1 | 9.8.2:rc2 | 9.8.3 | 9.8.3:p1 | 9.8.3:p2 | 9.8.3:p3 | 9.8.3:p4 | 9.9.0 | 9.9.0:a1 | 9.9.0:a2 | 9.9.0:a3 | 9.9.0:b1 | 9.9.0:b2 | 9.9.0:rc1 | 9.9.0:rc2 | 9.9.0:rc3 | 9.9.0:rc4 | 9.9.1 | 9.9.1:p1 | 9.9.1:p2 | 9.9.1:p3 | 9.9.1:p4
4 vendors · 10 products
References
15 links- www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
- lists.apple.com/archives/security-announce/2013/Sep/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
