Description
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Published: 2012-06-05
Score: 8.5 High
EPSS: 53.2% High
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2486-1 bind9 security update
Ubuntu USN Ubuntu USN USN-1462-1 Bind vulnerabilities
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.41123}

epss

{'score': 0.39738}


Subscriptions

Isc Bind
Redhat Enterprise Linux Rhel Els
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T19:01:02.980Z

Reserved: 2012-03-15T00:00:00.000Z

Link: CVE-2012-1667

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-06-05T16:55:01.277

Modified: 2026-04-29T01:13:23.040

Link: CVE-2012-1667

cve-icon Redhat

Severity : Important

Publid Date: 2012-06-04T00:00:00Z

Links: CVE-2012-1667 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses