CVE-2012-1667

Executive Summary

Informations
Name	CVE-2012-1667	First vendor Publication	2012-06-05
Vendor	Cve	Last vendor Modification	2013-04-18

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:C)
Cvss Base Score	8.5	Attack Range	Network
Cvss Impact Score	7.8	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:/a:isc:bind:9.9.1 cpe:/a:isc:bind:9.9.0:rc2 cpe:/a:isc:bind:9.9.0:rc3 cpe:/a:isc:bind:9.9.0 cpe:/a:isc:bind:9.9.0:a1 cpe:/a:isc:bind:9.9.0:rc4 cpe:/a:isc:bind:9.9.0:b2 cpe:/a:isc:bind:9.9.0:rc1 cpe:/a:isc:bind:9.9.0:b1 cpe:/a:isc:bind:9.9.0:a2 cpe:/a:isc:bind:9.9.0:a3 cpe:/a:isc:bind:9.8.3 cpe:/a:isc:bind:9.8.2:b2 cpe:/a:isc:bind:9.8.2 cpe:/a:isc:bind:9.8.2:rc2 cpe:/a:isc:bind:9.8.2:rc1 cpe:/a:isc:bind:9.8.1:rc1 cpe:/a:isc:bind:9.8.1 cpe:/a:isc:bind:9.8.1:p1 cpe:/a:isc:bind:9.7.6 cpe:/a:isc:bind:9.7.5:b1 cpe:/a:isc:bind:9.7.5:rc2 cpe:/a:isc:bind:9.7.5:rc1 cpe:/a:isc:bind:9.7.5 cpe:/a:isc:bind:9.7.4 cpe:/a:isc:bind:9.7.4:p1 cpe:/a:isc:bind:9.6-esv-r7 cpe:/a:isc:bind:9.6-esv-r6:rc2 cpe:/a:isc:bind:9.6-esv-r6:rc1 cpe:/a:isc:bind:9.6-esv-r6 cpe:/a:isc:bind:9.6-esv-r6:b1 cpe:/a:isc:bind:9.6-esv-r5 cpe:/a:isc:bind:9.6-esv-r5:p1 cpe:/a:isc:bind:9.6-esv cpe:/a:isc:bind:9.4-esv	35

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
CONFIRM	http://support.apple.com/kb/HT5501 http://www.isc.org/software/bind/advisories/cve-2012-1667 https://kb.isc.org/article/AA-00698
HP	http://marc.info/?l=bugtraq&m=134132772016230&w=2 http://marc.info/?l=bugtraq&m=134132772016230&w=2
REDHAT	http://rhn.redhat.com/errata/RHSA-2012-1110.html
SECUNIA	http://secunia.com/advisories/51096

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 22:36:21	Multiple Updates
2013-04-19 13:20:07	Multiple Updates

Type	Count
CPE ID(s)	35

Related	Severity
VU#381699	(High)
VMSA-2012-0016	(High)
USN-1462-1	(High)
RHSA-2012:1110	(High)
RHSA-2012:0717	(High)
RHSA-2012:0716	(High)
MDVSA-2012:089	(High)
HPSBUX02795 SSR...	(High)
GLSA-201209-04	(High)
DSA-2486	(High)