CVE-2012-2978
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote...
CVE-2012-2978 is a medium vulnerability (CVSS 5.0) in Nlnetlabs Nsd, published July 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.23%, the 95th percentile. Fixed in nsd3 3.2.5-1.squeeze2.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 9.23%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.2.5-1.squeeze2nsd3
Description
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nsd3Debian:6.0 | before 3.2.5-1.squeeze2, plus listed versions 3.2.5-13.2.5-1.squeeze1 | 3.2.5-1.squeeze2 |
What each source reports
NVD Score used
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- Record
CVE-2012-2978- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- Record
CVE-2012-2978- Updated
- 2026-11-02
EUVDEUVD-2012-2956No score
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- Record
EUVD-2012-2956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wgh7-q8c2-58ggNo score
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote...
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- Record
GHSA-wgh7-q8c2-58gg- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2978No score
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- Record
UBUNTU-CVE-2012-2978- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.