{"id":"CVE-2012-1667","aliases":["DEBIAN-CVE-2012-1667","DSA-2486-1","EUVD-2012-1677","GHSA-8wqw-72q7-h4q9","RHSA-2012:0716","RHSA-2012:0717","RHSA-2012:1110","SUSE-SU-2015:0011-2","SUSE-SU-2015:0480-1","openSUSE-SU-2024:10467-1"],"status":"published","title":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6...","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","severity":{"version":"2.0","score":8.5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.1326,"percentile":0.96408,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2012-06-05T00:00:00Z","modified":"2026-10-23T17:47:44Z","fixes":[{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.8.1.dfsg.P1-4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.8.1.dfsg.P1-4.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.8.1.dfsg.P1-4.1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"bind9","fixed_in":["1:9.7.3.dfsg-1~squeeze5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind-chroot","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind-debuginfo","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind-devel","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind-libs","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"bind-utils","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind-chroot","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind-debuginfo","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind-devel","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind-libs","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"bind-utils","fixed_in":["20:9.2.4-39.el4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.1.dfsg.P1-4.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.1.dfsg.P1-4.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.1.dfsg.P1-4.1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.7.3.dfsg-1~squeeze5"}]}],"versions":["1:9.7.2.dfsg.P3-1.1","1:9.7.3.dfsg-1~squeeze1","1:9.7.3.dfsg-1~squeeze1~bpo50+1","1:9.7.3.dfsg-1~squeeze2","1:9.7.3.dfsg-1~squeeze2~bpo50+1","1:9.7.3.dfsg-1~squeeze3","1:9.7.3.dfsg-1~squeeze3~bpo50+1","1:9.7.3.dfsg-1~squeeze4"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-libbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"caching-nameserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-libbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"caching-nameserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.6-20.P1.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.3-8.P3.el6_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind97-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind97-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.7.0-10.P2.el5_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20:9.2.4-39.el4"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.3P4-21.1"}]}],"bundled":37}],"products":[{"vendor":"isc","product":"bind"}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:089","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/53772","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2012\u0026m=slackware-security.536004","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://secunia.com/advisories/51096","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/381699","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","web"]},{"url":"http://www.isc.org/software/bind/advisories/cve-2012-1667","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=134132772016230\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1110.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT5501","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://kb.isc.org/article/AA-00698","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0717.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2012/dsa-2486","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1667","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8wqw-72q7-h4q9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-1667","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0716","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.isc.org/software/bind/advisories/cve-2012-1033","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=788650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828078","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0716.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1033","tags":["advisory"]},{"url":"https://www.isc.org/software/bind/advisories/cve-2012-1033","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1667","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0717","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0717.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1110","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1110.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150011-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/743758","tags":["report"]},{"url":"https://bugzilla.suse.com/765315","tags":["report"]},{"url":"https://bugzilla.suse.com/772945","tags":["report"]},{"url":"https://bugzilla.suse.com/780157","tags":["report"]},{"url":"https://bugzilla.suse.com/784602","tags":["report"]},{"url":"https://bugzilla.suse.com/796112","tags":["report"]},{"url":"https://bugzilla.suse.com/815230","tags":["report"]},{"url":"https://bugzilla.suse.com/819475","tags":["report"]},{"url":"https://bugzilla.suse.com/831899","tags":["report"]},{"url":"https://bugzilla.suse.com/858639","tags":["report"]},{"url":"https://bugzilla.suse.com/882511","tags":["report"]},{"url":"https://bugzilla.suse.com/908994","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8500","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/684163","tags":["report"]},{"url":"https://bugzilla.suse.com/696585","tags":["report"]},{"url":"https://bugzilla.suse.com/703907","tags":["report"]},{"url":"https://bugzilla.suse.com/715180","tags":["report"]},{"url":"https://bugzilla.suse.com/718441","tags":["report"]},{"url":"https://bugzilla.suse.com/727495","tags":["report"]},{"url":"https://bugzilla.suse.com/730995","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4313","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8864","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-1667","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2012-06-05T16:00:00Z","modified":"2024-08-06T19:01:02.98Z","updated_at":"2026-11-02T14:34:51.937988Z"}],"euvd":[{"id":"EUVD-2012-1677","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2012-06-05T16:00:00Z","modified":"2024-08-06T19:01:02Z","updated_at":"2026-11-03T01:56:17.382633Z"}],"ghsa":[{"id":"GHSA-8wqw-72q7-h4q9","title":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6...","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2022-05-14T03:49:25Z","modified":"2023-02-03T05:00:38Z","updated_at":"2026-11-02T14:52:49.982899Z"}],"nvd":[{"id":"CVE-2012-1667","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2012-06-05T16:55:01.277Z","modified":"2026-06-16T23:40:03.183Z","cvss":[{"version":"2.0","score":8.5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:14.336529Z"}],"osv":[{"id":"CVE-2012-1667","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2012-06-05T16:55:01Z","modified":"2026-04-10T03:42:16.785179Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-1667","description":"ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.","status":"published","published":"2012-06-05T16:55:01.277Z","modified":"2026-10-23T17:47:44.766306684Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DSA-2486-1","title":"bind9 - denial of service","status":"published","published":"2012-06-05T00:00:00Z","modified":"2026-03-09T01:19:14.700316Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10467-1","title":"bind-9.10.3P4-21.1 on GA media","description":"These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:15.60024Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2012:0716","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-15T19:57:58Z","modified":"2026-06-26T12:20:51.17391957Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0717","title":"Red Hat Security Advisory: bind97 security update","status":"published","published":"2024-09-15T19:58:02Z","modified":"2026-06-26T10:18:41Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1110","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-15T19:58:07Z","modified":"2026-06-26T10:19:17Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"SUSE-SU-2015:0011-2","title":"Security update for bind","description":"\nThis update fixes a DoS vulnerability in bind when handling malformed \nNSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.\n\nSecurity Issue references:\n\n    * CVE-2014-0591\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591\u003e\n\n","status":"published","published":"2014-01-27T18:38:10Z","modified":"2026-02-04T03:15:31.337379Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0480-1","title":"Security update for bind","description":"\nThis update fixes a DoS vulnerability in bind when handling malformed \nNSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.\n\nSecurity Issue references:\n\n    * CVE-2014-0591\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591\u003e\n\n","status":"published","published":"2014-01-27T18:54:09Z","modified":"2026-02-04T04:06:32.259139Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}