Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1667
HistoryJun 04, 2012 - 12:00 a.m.

CVE-2012-1667

2012-06-0400:00:00
ubuntu.com
ubuntu.com
25

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.904 High

EPSS

Percentile

98.8%

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle
resource records with a zero-length RDATA section, which allows remote DNS
servers to cause a denial of service (daemon crash or data corruption) or
obtain sensitive information from process memory via a crafted record.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchbind9< 1:9.4.2.dfsg.P2-2ubuntu0.10UNKNOWN
ubuntu10.04noarchbind9< 1:9.7.0.dfsg.P1-1ubuntu0.5UNKNOWN
ubuntu11.04noarchbind9< 1:9.7.3.dfsg-1ubuntu2.4UNKNOWN
ubuntu11.10noarchbind9< 1:9.7.3.dfsg-1ubuntu4.2UNKNOWN
ubuntu12.04noarchbind9< 1:9.8.1.dfsg.P1-4ubuntu0.1UNKNOWN

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.904 High

EPSS

Percentile

98.8%