Lucene search
FreeBSD57A700F9-12C0-11E2-9F86-001D923933B6HistorySep 26, 2012 - 12:00 a.m.
dns/bind9* -- crash on deliberately constructed combination of records
2012-09-2600:00:00
vuxml.freebsd.org
10
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.133
Percentile
95.6%
ISC reports:
A deliberately constructed combination of records could cause named
to hang while populating the additional section of a response.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | bind99 | < 9.9.1.4 | UNKNOWN |
| FreeBSD | any | noarch | bind99-base | < 9.9.1.4 | UNKNOWN |
| FreeBSD | any | noarch | bind98 | < 9.8.3.4 | UNKNOWN |
| FreeBSD | any | noarch | bind98-base | < 9.8.3.4 | UNKNOWN |
| FreeBSD | any | noarch | bind97 | < 9.7.6.4 | UNKNOWN |
| FreeBSD | any | noarch | bind97-base | < 9.7.6.4 | UNKNOWN |
| FreeBSD | any | noarch | bind96 | < 9.6.3.1.ESV.R7.4 | UNKNOWN |
| FreeBSD | any | noarch | bind96-base | < 9.6.3.1.ESV.R7.4 | UNKNOWN |
Related
nessus
nessus
Debian DSA-2560-1 : bind9 - denial of service
2012-10-22 00:00:00
AIX 7.1 TL 1 : bind9 (IV30367)
2013-01-24 00:00:00
openvas
openvas
CentOS Update for bind CESA-2012:1363 centos5
2012-10-16 00:00:00
Fedora Update for dnsperf FEDORA-2012-15965
2012-10-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-138)
2015-09-08 00:00:00
osv
osv
bind9 - denial of service
2012-10-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:51
centos
centos
bind, caching security update
2012-10-12 20:50:33
bind97 security update
2012-10-12 20:51:55
fedora
fedora
[SECURITY] Fedora 17 Update: dnsperf-2.0.0.0-2.fc17
2012-10-19 23:59:48
[SECURITY] Fedora 18 Update: bind-9.9.2-2.fc18
2012-10-21 06:15:37
[SECURITY] Fedora 16 Update: dnsperf-2.0.0.0-2.fc16
2012-10-23 01:52:50
nvd
nvd
CVE-2012-5166
2012-10-10 21:55:00
suse
suse
bind: Specially crafted DNS data can cause a lockup in named. (important)
2012-10-19 10:08:52
Security update for bind (important)
2012-10-24 08:09:16
Security update for bind (important)
2012-10-23 19:08:49
debiancve
debiancve
CVE-2012-5166
2012-10-10 21:55:00
amazon
amazon
Important: bind
2012-10-23 10:39:00
ubuntu
ubuntu
Bind vulnerability
2012-10-10 00:00:00
cve
cve
CVE-2012-5166
2012-10-10 21:55:00
oraclelinux
oraclelinux
bind security update
2012-10-12 00:00:00
bind97 security update
2012-10-12 00:00:00
bind security update
2012-11-29 00:00:00
redhat
redhat
(RHSA-2012:1363) Important: bind security update
2012-10-12 00:00:00
(RHSA-2012:1364) Important: bind97 security update
2012-10-12 00:00:00
(RHSA-2012:1365) Important: bind security update
2012-10-12 00:00:00
cvelist
cvelist
CVE-2012-5166
2012-10-10 21:00:00
securityvulns
securityvulns
bind DoS
2012-10-12 00:00:00
[ MDVSA-2012:162 ] bind
2012-10-12 00:00:00
ESA-2014-016: EMC VPLEX Multiple Vulnerabilities
2014-03-31 00:00:00
debian
debian
[SECURITY] [DSA 2560-1] bind9 security update
2012-10-20 19:33:44
ubuntucve
ubuntucve
CVE-2012-5166
2012-10-10 00:00:00
prion
prion
Design/Logic Flaw
2012-10-10 21:55:00
aix
aix
Vulnerability in AIX bind
2012-10-23 10:13:27
f5
f5
K14201 : BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2014-08-26 00:00:00
SOL14201 - BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2013-02-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:06.bind
2012-11-22 00:00:00
freebsd
freebsd
FreeBSD -- Multiple Denial of Service vulnerabilities with named(8)
2012-11-22 00:00:00
slackware
slackware
[slackware-security] bind
2012-12-07 03:50:45
threatpost
threatpost
Six Security Flaws Fixed in BIND 9.9.2
2012-12-05 16:15:32
gentoo
gentoo
BIND: Denial of service
2014-01-29 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.133
Percentile
95.6%
Related for 57A700F9-12C0-11E2-9F86-001D923933B6