Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-1192
unbound
resolver
vulnerability
ghost domain names
attack
nvd
cve-2012-1192
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.8%
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a “ghost domain names” attack.
Affected configurations
Node
unboundunboundRange≤1.4.10
ORunboundunboundMatch0.0
ORunboundunboundMatch0.1
ORunboundunboundMatch0.2
ORunboundunboundMatch0.3
ORunboundunboundMatch0.4
ORunboundunboundMatch0.5
ORunboundunboundMatch0.6
ORunboundunboundMatch0.7
ORunboundunboundMatch0.7.1
ORunboundunboundMatch0.7.2
ORunboundunboundMatch0.8
ORunboundunboundMatch0.9
ORunboundunboundMatch0.10
ORunboundunboundMatch0.11
ORunboundunboundMatch1.0.0
ORunboundunboundMatch1.0.1
ORunboundunboundMatch1.0.2
ORunboundunboundMatch1.1.0
ORunboundunboundMatch1.1.1
ORunboundunboundMatch1.2.0
ORunboundunboundMatch1.2.1
ORunboundunboundMatch1.3.0
ORunboundunboundMatch1.3.1
ORunboundunboundMatch1.3.2
ORunboundunboundMatch1.3.3
ORunboundunboundMatch1.3.4
ORunboundunboundMatch1.4.0
ORunboundunboundMatch1.4.1
ORunboundunboundMatch1.4.2
ORunboundunboundMatch1.4.3
ORunboundunboundMatch1.4.4
ORunboundunboundMatch1.4.5
ORunboundunboundMatch1.4.6
ORunboundunboundMatch1.4.7
ORunboundunboundMatch1.4.8
ORunboundunboundMatch1.4.9
Related
cvelist
cvelist
CVE-2012-1192
2022-10-03 16:15:26
nvd
nvd
CVE-2012-1192
2012-02-17 22:55:00
ubuntucve
ubuntucve
CVE-2012-1192
2012-02-17 00:00:00
prion
prion
Code injection
2012-02-17 22:55:00
nessus
nessus
Unbound < 1.4.11 Cache Update Policy Deleted Domain Name Resolving Weakness
2016-01-12 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.8%
Related for CVE-2012-1192