The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values…
Priority LOW 37Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Partial Red Hat: 11 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Why it matters now
EPSS 0.13066 96th percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 11 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 72
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:* | 9.0.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:* | 9.1.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:* | 9.1.2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:* | 9.1.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:* | 9.2.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:* | 9.2.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | ISC |
- cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:* Versions 9.1.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:* Versions 9.1.2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:* Versions 9.1.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:* Versions 9.2.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:* Versions 9.2.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·ISC
Show 62 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:* | 9.2.2 p3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:* | 9.2.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:* | 9.2.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:* | 9.2.5 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:* | 9.2.6 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:* | 9.2.7 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:* | 9.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:* | 9.3.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:* | 9.3.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:* | 9.3.2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:* | 9.3.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:* | 9.4.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:* | 9.4.0 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:* | 9.4.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:* | 9.4.2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:* | 9.4.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:* | 9.4.3 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:* | 9.5 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:* | 9.5.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5.0:rc1:*:*:*:*:*:* | 9.5.0 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:* | 9.5.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5.1:rc1:*:*:*:*:*:* | 9.5.1 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.5.1:rc2:*:*:*:*:*:* | 9.5.1 rc2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:* | 9.6.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:* | 9.6.0 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:* | 9.6.0 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:* | 9.6.0 rc2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:* | 9.7.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:* | 9.7.0 b1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:* | 9.7.0 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:p2:*:*:*:*:*:* | 9.7.0 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:* | 9.7.0 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:* | 9.7.0 rc2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:* | 9.7.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:* | 9.7.1 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.1:p2:*:*:*:*:*:* | 9.7.1 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.1:rc1:*:*:*:*:*:* | 9.7.1 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:* | 9.7.2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:* | 9.7.2 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.2:p2:*:*:*:*:*:* | 9.7.2 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.2:p3:*:*:*:*:*:* | 9.7.2 p3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.2:rc1:*:*:*:*:*:* | 9.7.2 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.3:*:*:*:*:*:*:* | 9.7.3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.3:b1:*:*:*:*:*:* | 9.7.3 b1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.3:p1:*:*:*:*:*:* | 9.7.3 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.3:rc1:*:*:*:*:*:* | 9.7.3 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.4:*:*:*:*:*:*:* | 9.7.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.7.4:b1:*:*:*:*:*:* | 9.7.4 b1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:* | 9.8.0 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:* | 9.8.0 a1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:* | 9.8.0 b1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:* | 9.8.0 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:* | 9.8.0 p2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:* | 9.8.0 p4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:* | 9.8.0 rc1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:* | 9.8.1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:* | 9.8.1 b1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:* | 9.8.1 b2 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:* | 9.8.1 b3 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:* | 9.8.1 p1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:* | 9.8.1 rc1 | Vulnerable | ISC |
- cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:* Versions 9.2.2 p3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:* Versions 9.2.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:* Versions 9.2.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:* Versions 9.2.5 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:* Versions 9.2.6 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:* Versions 9.2.7 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:* Versions 9.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:* Versions 9.3.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:* Versions 9.3.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:* Versions 9.3.2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:* Versions 9.3.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:* Versions 9.4.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:* Versions 9.4.0 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:* Versions 9.4.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:* Versions 9.4.2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:* Versions 9.4.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:* Versions 9.4.3 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:* Versions 9.5 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:* Versions 9.5.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5.0:rc1:*:*:*:*:*:* Versions 9.5.0 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:* Versions 9.5.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5.1:rc1:*:*:*:*:*:* Versions 9.5.1 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.5.1:rc2:*:*:*:*:*:* Versions 9.5.1 rc2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:* Versions 9.6.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:* Versions 9.6.0 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:* Versions 9.6.0 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:* Versions 9.6.0 rc2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:* Versions 9.7.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:* Versions 9.7.0 b1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:* Versions 9.7.0 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:p2:*:*:*:*:*:* Versions 9.7.0 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:* Versions 9.7.0 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:* Versions 9.7.0 rc2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:* Versions 9.7.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:* Versions 9.7.1 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.1:p2:*:*:*:*:*:* Versions 9.7.1 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.1:rc1:*:*:*:*:*:* Versions 9.7.1 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:* Versions 9.7.2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:* Versions 9.7.2 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.2:p2:*:*:*:*:*:* Versions 9.7.2 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.2:p3:*:*:*:*:*:* Versions 9.7.2 p3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.2:rc1:*:*:*:*:*:* Versions 9.7.2 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.3:*:*:*:*:*:*:* Versions 9.7.3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.3:b1:*:*:*:*:*:* Versions 9.7.3 b1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.3:p1:*:*:*:*:*:* Versions 9.7.3 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.3:rc1:*:*:*:*:*:* Versions 9.7.3 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.4:*:*:*:*:*:*:* Versions 9.7.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.7.4:b1:*:*:*:*:*:* Versions 9.7.4 b1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:*:*:*:*:*:*:* Versions 9.8.0 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:a1:*:*:*:*:*:* Versions 9.8.0 a1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:b1:*:*:*:*:*:* Versions 9.8.0 b1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:* Versions 9.8.0 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:p2:*:*:*:*:*:* Versions 9.8.0 p2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:p4:*:*:*:*:*:* Versions 9.8.0 p4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.0:rc1:*:*:*:*:*:* Versions 9.8.0 rc1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:*:*:*:*:*:*:* Versions 9.8.1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:b1:*:*:*:*:*:* Versions 9.8.1 b1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:b2:*:*:*:*:*:* Versions 9.8.1 b2 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:b3:*:*:*:*:*:* Versions 9.8.1 b3 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:p1:*:*:*:*:*:* Versions 9.8.1 p1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.8.1:rc1:*:*:*:*:*:* Versions 9.8.1 rc1 Vulnerable ·ISC
Remediation
Red Hat 2 advisories
- RHSA-2012:0716 Released 2012-06-07 · Red Hat rating Importantbind security update
- RHEL Desktop Workstation (v. 5 client) bind-30:9.3.6-20.P1.el5_8.1, bind-chroot-30:9.3.6-20.P1.el5_8.1, bind-chroot-30:9.3.6-20.P1.el5_8.1.i386 +6
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-20.P1.el5_8.1, bind-30:9.3.6-20.P1.el5_8.1.i386, bind-30:9.3.6-20.P1.el5_8.1.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-20.P1.el5_8.1, bind-30:9.3.6-20.P1.el5_8.1.i386, bind-libs-30:9.3.6-20.P1.el5_8.1 +5
- Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3, bind-utils-32:9.7.3-8.P3.el6_2.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3, bind-utils-32:9.7.3-8.P3.el6_2.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux Server (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3 +2
- Red Hat Enterprise Linux Server Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3.ppc +1
- Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3, bind-sdb-32:9.7.3-8.P3.el6_2.3
- RHSA-2012:0717 Released 2012-06-07 · Red Hat rating Importantbind97 security update
- RHEL Desktop Workstation (v. 5 client) bind97-32:9.7.0-10.P2.el5_8.1, bind97-32:9.7.0-10.P2.el5_8.1.i386, bind97-chroot-32:9.7.0-10.P2.el5_8.1 +7
- Red Hat Enterprise Linux (v. 5 server) bind97-32:9.7.0-10.P2.el5_8.1, bind97-32:9.7.0-10.P2.el5_8.1.i386, bind97-32:9.7.0-10.P2.el5_8.1.ia64 +17
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix planned: Will not fix |
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2012:0716, RHSA-2012:0717 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:0716, RHSA-2012:0717 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0716 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0716 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-1033
- 2026-10-03 Alias added: GHSA-g63p-j554-jxp4
References
More ISC Bind vulnerabilities
- TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
- TI-2023-27571 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related… CVSS 3.1HIGH 7.5
- TI-2021-07476 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVSS 3.1CRITICAL 9.8
- TI-2023-27773 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… CVSS 3.1HIGH 7.5
- TI-2020-06910 A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVSS 3.1HIGH 7.5
- TI-2016-02320 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x… CVSS 3.0HIGH 7.5
Sources
- CVE-2012-1033 · CVE Program
- CVE-2012-1033 · NVD
- FIRST EPSS
- GHSA-g63p-j554-jxp4 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-1033 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences