CVE-2012-1667

CVE-2012-1667 affects ISC BIND 9.x before patched releases (examples: 9.7.6-P1, 9.8.3-P1, 9.9.1-P1; and 9.4-ESV/9.6-ESV before listed P1s). The vulnerability arises from improper handling of resource records with a zero-length RDATA, enabling remote DNS servers to trigger a DoS (daemon crash or d...

CVE-2012-5166

Summary (CVE-2012-5166) The BIND DNS server (named) is vulnerable to a remote DoS when specific combinations of RDATA are loaded in a query target, causing the server to lock up or crash. In affected environments using BIG-IP/F5 implementations, multiple product lines list vulnerable BIND compone...

CVE-2012-4244

CVE-2012-4244 affects BIND 9.x with RDATA values exceeding 65535 bytes, enabling remote DoS via assertion failure in the named daemon. Connected advisories confirm a broad impact across multiple distributions and products (FreeBSD SA-12:06.bind; CentOS/RHEL updates; Fedora package updates; F5 adv...

CVE-2012-3817

CVE-2012-3817 affects BIND when DNSSEC validation is enabled. Under high query load, BIND could use data from the failing-query cache before it is fully initialized, causing an assertion failure and resulting in a denial of service (remote crash of named). Affected ranges include various 9.4.x–9....

CVE-2012-1033

The CVE-2012-1033 issue affects ISC BIND 9 up to 9.8.1-P1, where the resolver overwrites cached NS records and TTLs during handling of an A query response. This can allow remote attackers to trigger continued resolvability of revoked domain names via a ghost domain names attack. Public Nessus/IDS...

CVE-2012-5688

CVE-2012-5688 affects ISC BIND 9.8.x (before 9.8.4-P1) and 9.9.x (before 9.9.2-P1) when DNS64 is enabled. A crafted DNS query can trigger an assertion failure in named(8), causing a denial of service. The issue is mitigated by not enabling DNS64 or by upgrading to patched releases (9.8.4-P1, 9.9....

CVE-2012-3868

CVE-2012-3868 concerns ISC BIND 9.9.x prior to 9.9.1-P2, where a race condition in ns_client structure management can be exploited by a high volume of TCP queries to cause a denial of service (memory consumption or process exit). The description specifies the underlying cause as a race condition ...