Read the docs
TI-2012-01098 Aliases CVE-2012-1192GHSA-w9x7-rg7h-623x

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS…

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Why it matters now

EPSS 0.01312 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 37

CPEVersionsRoleVendor
cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*up to 1.4.10VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*0.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*0.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*0.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*0.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*0.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*0.5VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*0.6VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*0.7VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableUnbound
  • cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:* Versions up to 1.4.10 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:* Versions 0.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:* Versions 0.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Unbound
Show 27 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*0.7.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*0.8VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.9:*:*:*:*:*:*:*0.9VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*0.10VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*0.11VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*1.3.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*1.4.6VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*1.4.8VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableUnbound
  • cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.9:*:*:*:*:*:*:* Versions 0.9 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:* Versions 0.10 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:* Versions 0.11 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·Unbound

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-1192
  2. 2026-10-03 Alias added: GHSA-w9x7-rg7h-623x

References

Other 1

  • TI-2011-04189 validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof… CVSS 2.0HIGH 7.8
  • TI-2011-03899 Unbound before 1.4.13p2 attempts to free unallocated memory during processing of… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences