CVE-2012-3817

bind: heavy DNSSEC validation load can cause assertion failure

Published Jul 25, 2012 CVSS 2.0 · 7.8 High EPSS 23.7% KEV · Not listed
Description
ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2517-1 bind9 security update
EUVD EUVD EUVD-2012-3764 ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
Ubuntu USN Ubuntu USN USN-1518-1 Bind vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:21 PM
Reserved
Jun 29, 2012, 12:00 AM
Status
Modified
Published
Jul 25, 2012, 10:42 AM
Modified
Jun 16, 2026, 11:43 PM
Severity
Important
Public date
Jul 24, 2012, 12:00 AM