Lucene search
HistoryJun 05, 2012 - 4:55 p.m.
CVE-2012-1667
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
8.4 High
AI Score
Confidence
High
0.904 High
EPSS
Percentile
98.8%
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Affected configurations
Node
iscbindMatch9.0
ORiscbindMatch9.0.0rc1
ORiscbindMatch9.0.0rc2
ORiscbindMatch9.0.0rc3
ORiscbindMatch9.0.0rc4
ORiscbindMatch9.0.0rc5
ORiscbindMatch9.0.0rc6
ORiscbindMatch9.0.1
ORiscbindMatch9.0.1rc1
ORiscbindMatch9.0.1rc2
ORiscbindMatch9.1
ORiscbindMatch9.1.0rc1
ORiscbindMatch9.1.1
ORiscbindMatch9.1.1rc1
ORiscbindMatch9.1.1rc2
ORiscbindMatch9.1.1rc3
ORiscbindMatch9.1.1rc4
ORiscbindMatch9.1.1rc5
ORiscbindMatch9.1.1rc6
ORiscbindMatch9.1.1rc7
ORiscbindMatch9.1.2
ORiscbindMatch9.1.2rc1
ORiscbindMatch9.1.3
ORiscbindMatch9.1.3rc1
ORiscbindMatch9.1.3rc2
ORiscbindMatch9.1.3rc3
ORiscbindMatch9.2
ORiscbindMatch9.2.0
ORiscbindMatch9.2.0a1
ORiscbindMatch9.2.0a2
ORiscbindMatch9.2.0a3
ORiscbindMatch9.2.0b1
ORiscbindMatch9.2.0b2
ORiscbindMatch9.2.0rc1
ORiscbindMatch9.2.0rc10
ORiscbindMatch9.2.0rc2
ORiscbindMatch9.2.0rc3
ORiscbindMatch9.2.0rc4
ORiscbindMatch9.2.0rc5
ORiscbindMatch9.2.0rc6
ORiscbindMatch9.2.0rc7
ORiscbindMatch9.2.0rc8
ORiscbindMatch9.2.0rc9
ORiscbindMatch9.2.1
ORiscbindMatch9.2.1rc1
ORiscbindMatch9.2.1rc2
ORiscbindMatch9.2.2
ORiscbindMatch9.2.2p2
ORiscbindMatch9.2.2p3
ORiscbindMatch9.2.2rc1
ORiscbindMatch9.2.3
ORiscbindMatch9.2.3rc1
ORiscbindMatch9.2.3rc2
ORiscbindMatch9.2.3rc3
ORiscbindMatch9.2.3rc4
ORiscbindMatch9.2.4
ORiscbindMatch9.2.4rc2
ORiscbindMatch9.2.4rc3
ORiscbindMatch9.2.4rc4
ORiscbindMatch9.2.4rc5
ORiscbindMatch9.2.4rc6
ORiscbindMatch9.2.4rc7
ORiscbindMatch9.2.4rc8
ORiscbindMatch9.2.5
ORiscbindMatch9.2.5b2
ORiscbindMatch9.2.5rc1
ORiscbindMatch9.2.6
ORiscbindMatch9.2.6rc1
ORiscbindMatch9.2.7
ORiscbindMatch9.2.7rc1
ORiscbindMatch9.2.7rc2
ORiscbindMatch9.2.7rc3
ORiscbindMatch9.2.8
ORiscbindMatch9.2.9
ORiscbindMatch9.2.9rc1
ORiscbindMatch9.3
ORiscbindMatch9.3.0
ORiscbindMatch9.3.0b2
ORiscbindMatch9.3.0b3
ORiscbindMatch9.3.0b4
ORiscbindMatch9.3.0rc1
ORiscbindMatch9.3.0rc2
ORiscbindMatch9.3.0rc3
ORiscbindMatch9.3.0rc4
ORiscbindMatch9.3.1
ORiscbindMatch9.3.1b2
ORiscbindMatch9.3.1rc1
ORiscbindMatch9.3.2
ORiscbindMatch9.3.2rc1
ORiscbindMatch9.3.3
ORiscbindMatch9.3.3rc1
ORiscbindMatch9.3.3rc2
ORiscbindMatch9.3.3rc3
ORiscbindMatch9.3.4
ORiscbindMatch9.3.5
ORiscbindMatch9.3.5p2_w1
ORiscbindMatch9.3.5rc1
ORiscbindMatch9.3.5rc2
ORiscbindMatch9.3.6
ORiscbindMatch9.3.6rc1
ORiscbindMatch9.4
ORiscbindMatch9.4esv
ORiscbindMatch9.4b1esv
ORiscbindMatch9.4r1esv
ORiscbindMatch9.4r2esv
ORiscbindMatch9.4r3esv
ORiscbindMatch9.4r4esv
ORiscbindMatch9.4r4-p1esv
ORiscbindMatch9.4r5esv
ORiscbindMatch9.4r5-b1esv
ORiscbindMatch9.4r5-p1esv
ORiscbindMatch9.4r5-rc1esv
ORiscbindMatch9.4.0
ORiscbindMatch9.4.0a1
ORiscbindMatch9.4.0a2
ORiscbindMatch9.4.0a3
ORiscbindMatch9.4.0a4
ORiscbindMatch9.4.0a5
ORiscbindMatch9.4.0a6
ORiscbindMatch9.4.0b1
ORiscbindMatch9.4.0b2
ORiscbindMatch9.4.0b3
ORiscbindMatch9.4.0b4
ORiscbindMatch9.4.0rc1
ORiscbindMatch9.4.0rc2
ORiscbindMatch9.4.1
ORiscbindMatch9.4.2
ORiscbindMatch9.4.2p2_w1
ORiscbindMatch9.4.2rc1
ORiscbindMatch9.4.2rc2
ORiscbindMatch9.4.3
ORiscbindMatch9.4.3b1
ORiscbindMatch9.4.3b2
ORiscbindMatch9.4.3b3
ORiscbindMatch9.4.3p1
ORiscbindMatch9.4.3p2
ORiscbindMatch9.4.3p3
ORiscbindMatch9.4.3p4
ORiscbindMatch9.4.3p5
ORiscbindMatch9.4.3rc1
ORiscbindMatch9.5
ORiscbindMatch9.5.0
ORiscbindMatch9.5.0a1
ORiscbindMatch9.5.0a2
ORiscbindMatch9.5.0a3
ORiscbindMatch9.5.0a4
ORiscbindMatch9.5.0a5
ORiscbindMatch9.5.0a6
ORiscbindMatch9.5.0a7
ORiscbindMatch9.5.0b1
ORiscbindMatch9.5.0b2
ORiscbindMatch9.5.0b3
ORiscbindMatch9.5.0p1
ORiscbindMatch9.5.0p2
ORiscbindMatch9.5.0p2_w1
ORiscbindMatch9.5.0p2_w2
ORiscbindMatch9.5.0rc1
ORiscbindMatch9.5.1
ORiscbindMatch9.5.1b1
ORiscbindMatch9.5.1b2
ORiscbindMatch9.5.1b3
ORiscbindMatch9.5.1rc1
ORiscbindMatch9.5.1rc2
ORiscbindMatch9.5.2
ORiscbindMatch9.5.2b1
ORiscbindMatch9.5.2p1
ORiscbindMatch9.5.2p2
ORiscbindMatch9.5.2p3
ORiscbindMatch9.5.2p4
ORiscbindMatch9.5.2rc1
ORiscbindMatch9.5.3b1
ORiscbindMatch9.5.3rc1
ORiscbindMatch9.6esv
ORiscbindMatch9.6r1esv
ORiscbindMatch9.6r2esv
ORiscbindMatch9.6r3esv
ORiscbindMatch9.6r4esv
ORiscbindMatch9.6r4_p1esv
ORiscbindMatch9.6r5esv
ORiscbindMatch9.6r5_b1esv
ORiscbindMatch9.6r5_p1esv
ORiscbindMatch9.6r6esv
ORiscbindMatch9.6r6_b1esv
ORiscbindMatch9.6r6_rc1esv
ORiscbindMatch9.6r6_rc2esv
ORiscbindMatch9.6r7esv
ORiscbindMatch9.6r7_p1esv
ORiscbindMatch9.6r7_p2esv
ORiscbindMatch9.6r9esv
ORiscbindMatch9.6r9_p1esv
ORiscbindMatch9.6.0
ORiscbindMatch9.6.0a1
ORiscbindMatch9.6.0b1
ORiscbindMatch9.6.0p1
ORiscbindMatch9.6.0rc1
ORiscbindMatch9.6.0rc2
ORiscbindMatch9.6.1
ORiscbindMatch9.6.1b1
ORiscbindMatch9.6.1p1
ORiscbindMatch9.6.1p2
ORiscbindMatch9.6.1p3
ORiscbindMatch9.6.1rc1
ORiscbindMatch9.6.2
ORiscbindMatch9.6.2b1
ORiscbindMatch9.6.2p1
ORiscbindMatch9.6.2p2
ORiscbindMatch9.6.2p3
ORiscbindMatch9.6.2rc1
ORiscbindMatch9.6.3
ORiscbindMatch9.6.3b1
ORiscbindMatch9.6.3rc1
ORiscbindMatch9.7.0
ORiscbindMatch9.7.0a1
ORiscbindMatch9.7.0a2
ORiscbindMatch9.7.0a3
ORiscbindMatch9.7.0b1
ORiscbindMatch9.7.0b2
ORiscbindMatch9.7.0b3
ORiscbindMatch9.7.0p1
ORiscbindMatch9.7.0p2
ORiscbindMatch9.7.0rc1
ORiscbindMatch9.7.0rc2
ORiscbindMatch9.7.1
ORiscbindMatch9.7.1b1
ORiscbindMatch9.7.1p1
ORiscbindMatch9.7.1p2
ORiscbindMatch9.7.1rc1
ORiscbindMatch9.7.2
ORiscbindMatch9.7.2p1
ORiscbindMatch9.7.2p2
ORiscbindMatch9.7.2p3
ORiscbindMatch9.7.2rc1
ORiscbindMatch9.7.3
ORiscbindMatch9.7.3b1
ORiscbindMatch9.7.3p1
ORiscbindMatch9.7.3rc1
ORiscbindMatch9.7.4
ORiscbindMatch9.7.4b1
ORiscbindMatch9.7.4p1
ORiscbindMatch9.7.4rc1
ORiscbindMatch9.7.5
ORiscbindMatch9.7.5b1
ORiscbindMatch9.7.5rc1
ORiscbindMatch9.7.5rc2
ORiscbindMatch9.7.6
ORiscbindMatch9.9.0
ORiscbindMatch9.9.0a1
ORiscbindMatch9.9.0a2
ORiscbindMatch9.9.0a3
ORiscbindMatch9.9.0b1
ORiscbindMatch9.9.0b2
ORiscbindMatch9.9.0rc1
ORiscbindMatch9.9.0rc2
ORiscbindMatch9.9.0rc3
ORiscbindMatch9.9.0rc4
ORiscbindMatch9.9.1
References
lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html
lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html
marc.info/?l=bugtraq&m=134132772016230&w=2
rhn.redhat.com/errata/RHSA-2012-0717.html
rhn.redhat.com/errata/RHSA-2012-1110.html
secunia.com/advisories/51096
support.apple.com/kb/HT5501
www.debian.org/security/2012/dsa-2486
www.isc.org/software/bind/advisories/cve-2012-1667
www.kb.cert.org/vuls/id/381699
www.mandriva.com/security/advisories?name=MDVSA-2012:089
www.securityfocus.com/bid/53772
www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
kb.isc.org/article/AA-00698
Related
nessus
nessus
SuSE 11.2 Security Update : bind (SAT Patch Number 6382)
2013-01-25 00:00:00
SuSE 11.1 Security Update : bind (SAT Patch Number 6388)
2013-01-25 00:00:00
Oracle Solaris Third-Party Patch Update : bind (cve_2012_1667_denial_of)
2015-01-19 00:00:00
debian
debian
[SECURITY] [DSA 2486-1] bind9 security update
2012-06-05 21:08:48
checkpoint_advisories
checkpoint_advisories
ISC BIND Zero Length RDATA Denial of Service (CVE-2012-1667)
2012-09-04 00:00:00
ISC BIND Zero Length RDATA Denial of Service - Ver2 (CVE-2012-1667)
2012-02-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2012:0741-4)
2021-06-09 00:00:00
openSUSE: Security Advisory for bind (openSUSE-SU-2012:0722-1)
2012-12-13 00:00:00
Fedora Update for bind FEDORA-2012-8968
2012-08-30 00:00:00
cvelist
cvelist
CVE-2012-1667
2012-06-05 16:00:00
redhat
redhat
(RHSA-2012:1110) Important: bind security update
2012-07-23 00:00:00
(RHSA-2012:0716) Important: bind security update
2012-06-07 00:00:00
(RHSA-2012:0717) Important: bind97 security update
2012-06-07 00:00:00
aix
aix
Vulnerability in AIX bind
2012-07-13 13:28:29
suse
suse
Security update for bind (important)
2012-06-15 01:08:32
Security update for bind (important)
2012-07-13 21:08:39
Security update for bind (important)
2012-06-27 20:08:24
freebsd
freebsd
dns/bind9* -- zero-length RDATA can cause named to terminate, reveal memory
2012-06-04 00:00:00
FreeBSD -- Incorrect handling of zero-length RDATA fields in named(8)
2012-06-12 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: bind-9.9.1-2.P1.fc17
2012-06-13 21:32:15
[SECURITY] Fedora 16 Update: bind-9.8.3-2.P1.fc16
2012-06-15 12:24:27
[SECURITY] Fedora 17 Update: bind-9.9.1-9.P3.fc17
2012-09-23 03:28:42
prion
prion
Memory corruption
2012-06-05 16:55:00
f5
f5
SOL13660 - BIND vulnerability CVE-2012-1667
2012-06-12 00:00:00
K13660 : BIND vulnerability CVE-2012-1667
2014-08-26 00:00:00
cert
cert
ISC BIND 9 zero length rdata named vulnerability
2012-06-04 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:03.bind
2012-06-12 00:00:00
oraclelinux
oraclelinux
bind security update
2012-08-06 00:00:00
bind security update
2012-06-07 00:00:00
bind97 security update
2012-06-07 00:00:00
ubuntucve
ubuntucve
CVE-2012-1667
2012-06-04 00:00:00
seebug
seebug
ISC BIND 9 DNS资源记录处理远程拒绝服务漏洞
2012-06-05 00:00:00
securityvulns
securityvulns
ISC bind DoS
2012-06-13 00:00:00
debiancve
debiancve
CVE-2012-1667
2012-06-05 16:55:01
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:54:51
cve
cve
CVE-2012-1667
2012-06-05 16:55:01
centos
centos
bind97 security update
2012-06-07 17:22:36
bind, caching security update
2012-06-07 17:23:50
amazon
amazon
Important: bind
2012-06-10 11:47:00
slackware
slackware
[slackware-security] bind
2012-06-14 23:45:02
[slackware-security] bind
2012-12-07 03:50:45
ubuntu
ubuntu
Bind vulnerabilities
2012-06-05 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2012-09-24 00:00:00
threatpost
threatpost
Six Security Flaws Fixed in BIND 9.9.2
2012-12-05 16:15:32
nmap
nmap
vulners NSE Script
2019-06-26 17:06:44
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
8.4 High
AI Score
Confidence
High
0.904 High
EPSS
Percentile
98.8%
Related for NVD:CVE-2012-1667