CVE-2012-3817

2012-07-2510:42:00

CWE-20

[email protected]

web.nvd.nist.gov

341

isc bind

cve-2012-3817

remote attack

dns

denial of service

nvd

6.3 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.066 Low

EPSS

Percentile

93.7%

JSON

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.

CPENameOperatorVersion
isc:bindisc bindeq9.4.1
isc:bindisc bindeq9.4
isc:bindisc bindeq9.4.2
isc:bindisc bindeq9.4.3
isc:bindisc bindeq9.4.0
isc:bindisc bindeq9.5
isc:bindisc bindeq9.5.1
isc:bindisc bindeq9.5.2
isc:bindisc bindeq9.5.0
isc:bindisc bindeq9.5.3

CPE	Name	Operator	Version
isc:bind	isc bind	eq	9.4.1
isc:bind	isc bind	eq	9.4
isc:bind	isc bind	eq	9.4.2
isc:bind	isc bind	eq	9.4.3
isc:bind	isc bind	eq	9.4.0
isc:bind	isc bind	eq	9.5
isc:bind	isc bind	eq	9.5.1
isc:bind	isc bind	eq	9.5.2
isc:bind	isc bind	eq	9.5.0
isc:bind	isc bind	eq	9.5.3