CVE-2012-3817: isc bind Improper Input Validation

CVSS: 7.8v2.0HighModified

AliasesRHSA-2012:1122RHSA-2012:1123DEBIAN-CVE-2012-3817+1 more

Published 25-07-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-3817 is a high (CVSS 7.8) Improper Input Validation vulnerability in isc bind. EPSS estimates a 23.66% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities.

Overall risk

36/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v2.0 (NVD)

EPSS score

23.66%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10467-1

Timeline

25-07-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.

CVSS metrics

1 score · 1 source · 1 version

v2.07.8

EPSS trend

Probability

23.66%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 23.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

23.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Redhat15 products

bind< 30:9.3.6-20.P1.el5_8.2 | < 32:9.8.2-0.10.rc1.el6_3.2
bind-chroot< 30:9.3.6-20.P1.el5_8.2 | < 32:9.8.2-0.10.rc1.el6_3.2
bind-debuginfo< 30:9.3.6-20.P1.el5_8.2 | < 32:9.8.2-0.10.rc1.el6_3.2
bind-devel< 30:9.3.6-20.P1.el5_8.2 | < 32:9.8.2-0.10.rc1.el6_3.2
bind-libbind-devel< 30:9.3.6-20.P1.el5_8.2

Show all 15

Debian1 product

bind9< 1:9.8.1.dfsg.P1-4.2 | < 1:9.7.3.dfsg-1~squeeze6

Isc1 product

bind9.4 | 9.4.0 | 9.4.0:rc1 | 9.4.1 | 9.4.2 | 9.4.3 | 9.4.3:rc1 | 9.5 | 9.5.0 | 9.5.0:rc1 | 9.5.1 | 9.5.1:rc1 | 9.5.1:rc2 | 9.5.2 | 9.5.2:rc1 | 9.5.3 | 9.5.3:rc1 | 9.6.0 | 9.6.0:p1 | 9.6.0:rc1 | 9.6.0:rc2 | 9.6.1 | 9.6.1:p1 | 9.6.1:p2 | 9.6.1:p3 | 9.6.1:rc1 | 9.6.2 | 9.6.2:rc1 | 9.6.3 | 9.6.3:rc1 | 9.7.0 | 9.7.0:p1 | 9.7.0:p2 | 9.7.0:rc1 | 9.7.0:rc2 | 9.7.1 | 9.7.1:p1 | 9.7.1:p2 | 9.7.1:rc1 | 9.7.2 | 9.7.2:p1 | 9.7.2:p2 | 9.7.2:p3 | 9.7.2:rc1 | 9.7.3 | 9.7.3:b1 | 9.7.3:p1 | 9.7.3:rc1 | 9.7.4 | 9.7.4:b1 | 9.7.4:p1 | 9.7.4:rc1 | 9.7.5 | 9.7.5:b1 | 9.7.5:rc1 | 9.7.5:rc2 | 9.7.6 | 9.7.6:p1 | 9.8.0 | 9.8.0:a1 | 9.8.0:b1 | 9.8.0:p1 | 9.8.0:p2 | 9.8.0:p4 | 9.8.0:rc1 | 9.8.1 | 9.8.1:b1 | 9.8.1:b2 | 9.8.1:b3 | 9.8.1:p1 | 9.8.1:rc1 | 9.8.2:b1 | 9.8.2:rc1 | 9.8.2:rc2 | 9.8.3 | 9.8.3:p1 | 9.9.0 | 9.9.0:a1 | 9.9.0:a2 | 9.9.0:a3 | 9.9.0:b1 | 9.9.0:b2 | 9.9.0:rc1 | 9.9.0:rc2 | 9.9.0:rc3 | 9.9.0:rc4 | 9.9.1 | 9.9.1:p1 | 9.6 | 9.6:r5_p1 | 9.6:r6_b1 | 9.6:r6_rc1 | 9.6:r6_rc2 | 9.6:r7_p1

3 vendors · 17 products