CVE-2012-1667
Description
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
49.322
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update bind 9.9.1 to latest version | Windows |
| Multiple vulnerabilities are fixed in OS X Lion Update 10.7.5 (Client) | Mac |
| Multiple vulnerabilities are fixed in OS X Lion Update 10.7.5 (Client Combo) | Mac |
| Internet Domain Name Server (USN-1462-1) libdns81_9.8.1.dfsg.P1-4_i386.deb | Linux |
| Internet Domain Name Server (USN-1462-1) libdns81_9.8.1.dfsg.P1-4_amd64.deb | Linux |
| Internet Domain Name Server (USN-1462-1) libdns81_9.8.1.dfsg.P1-4ubuntu0.13_i386.deb | Linux |
| Internet Domain Name Server (USN-1462-1) libdns81_9.8.1.dfsg.P1-4ubuntu0.13_amd64.deb | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-600003 | OS X Lion Update 10.7.5 (Client) |
| PATCH-600004 | OS X Lion Update 10.7.5 (Client Combo) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234