CVE-2012-1667
NoneCVSS
—
EPSS
13.3%
Published
Jun 5, 2012
CISA due date
—
The record
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | bind9 | 0 | 1:9.8.1.dfsg.P1-4.1 |
| Debian:12 | bind9 | 0 | 1:9.8.1.dfsg.P1-4.1 |
| Debian:13 | bind9 | 0 | 1:9.8.1.dfsg.P1-4.1 |
| Debian:6.0 | bind9 | 0 | 1:9.7.3.dfsg-1~squeeze5 |
| Red Hat:enterprise_linux:5::client | bind | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-chroot | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-debuginfo | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-libbind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-libs | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-sdb | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | bind-utils | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client | caching-nameserver | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-chroot | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-debuginfo | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libbind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libs | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-sdb | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind-utils | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97 | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-chroot | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-debuginfo | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-devel | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-libs | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-utils | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::client_workstation | caching-nameserver | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-chroot | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-debuginfo | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-libbind-devel | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-libs | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-sdb | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind-utils | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97 | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97-chroot | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97-debuginfo | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97-devel | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97-libs | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | bind97-utils | 0 | 32:9.7.0-10.P2.el5_8.1 |
| Red Hat:enterprise_linux:5::server | caching-nameserver | 0 | 30:9.3.6-20.P1.el5_8.1 |
| Red Hat:enterprise_linux:6::client | bind | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-chroot | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-debuginfo | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-devel | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-libs | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-sdb | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::client | bind-utils | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-chroot | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-debuginfo | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-devel | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-libs | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-sdb | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::computenode | bind-utils | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-chroot | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-debuginfo | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-devel | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-libs | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-sdb | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::server | bind-utils | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-chroot | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-debuginfo | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-devel | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-libs | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-sdb | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:enterprise_linux:6::workstation | bind-utils | 0 | 32:9.7.3-8.P3.el6_2.3 |
| Red Hat:rhel_els:4::as | bind | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::as | bind-chroot | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::as | bind-debuginfo | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::as | bind-devel | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::as | bind-libs | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::as | bind-utils | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind-chroot | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind-debuginfo | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind-devel | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind-libs | 0 | 20:9.2.4-39.el4 |
| Red Hat:rhel_els:4::es | bind-utils | 0 | 20:9.2.4-39.el4 |
| openSUSE:Tumbleweed | bind | 0 | 9.10.3P4-21.1 |
Related vulnerabilities
- CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND… Also affects bind9
- CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses… Also affects bind9
- CVE-2024-12705 Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by… Also affects bind9
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind9
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind9
- CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver… Also affects bind9
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind9