First published: Fri Feb 17 2012(Updated: )
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
libunbound | <=1.4.10 | |
libunbound | =0.0 | |
libunbound | =0.1 | |
libunbound | =0.2 | |
libunbound | =0.3 | |
libunbound | =0.4 | |
libunbound | =0.5 | |
libunbound | =0.6 | |
libunbound | =0.7 | |
libunbound | =0.7.1 | |
libunbound | =0.7.2 | |
libunbound | =0.8 | |
libunbound | =0.9 | |
libunbound | =0.10 | |
libunbound | =0.11 | |
libunbound | =1.0.0 | |
libunbound | =1.0.1 | |
libunbound | =1.0.2 | |
libunbound | =1.1.0 | |
libunbound | =1.1.1 | |
libunbound | =1.2.0 | |
libunbound | =1.2.1 | |
libunbound | =1.3.0 | |
libunbound | =1.3.1 | |
libunbound | =1.3.2 | |
libunbound | =1.3.3 | |
libunbound | =1.3.4 | |
libunbound | =1.4.0 | |
libunbound | =1.4.1 | |
libunbound | =1.4.2 | |
libunbound | =1.4.3 | |
libunbound | =1.4.4 | |
libunbound | =1.4.5 | |
libunbound | =1.4.6 | |
libunbound | =1.4.7 | |
libunbound | =1.4.8 | |
libunbound | =1.4.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-1192 has a medium severity rating, allowing remote attackers potential exploits.
To fix CVE-2012-1192, upgrade Unbound to version 1.4.11 or later.
CVE-2012-1192 affects Unbound versions prior to 1.4.11, including all versions in the 1.4.x range up to 1.4.10.
CVE-2012-1192 facilitates a 'ghost domain names' attack, allowing continued resolvability of revoked domain names.
CVE-2012-1192 is a remote vulnerability that can be exploited by attackers over the network.