CVE-2012-3817: Input Validation

Published Jul 25, 2012

Updated

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.

Affected Software

94 affected components

ISC BIND=9.4

ISC BIND=9.4.0

ISC BIND=9.4.0-rc1

ISC BIND=9.4.1

ISC BIND=9.4.2

ISC BIND=9.4.3

ISC BIND=9.4.3-rc1

ISC BIND=9.5

ISC BIND=9.5.0

ISC BIND=9.5.0-rc1

ISC BIND=9.5.1

ISC BIND=9.5.1-rc1

ISC BIND=9.5.1-rc2

ISC BIND=9.5.2

ISC BIND=9.5.2-rc1

ISC BIND=9.5.3

ISC BIND=9.5.3-rc1

ISC BIND=9.6.0

ISC BIND=9.6.0-p1

ISC BIND=9.6.0-rc1

ISC BIND=9.6.0-rc2

ISC BIND=9.6.1

ISC BIND=9.6.1-p1

ISC BIND=9.6.1-p2

ISC BIND=9.6.1-p3

ISC BIND=9.6.1-rc1

ISC BIND=9.6.2

ISC BIND=9.6.2-rc1

ISC BIND=9.6.3

ISC BIND=9.6.3-rc1

ISC BIND=9.7.0

ISC BIND=9.7.0-p1

ISC BIND=9.7.0-p2

ISC BIND=9.7.0-rc1

ISC BIND=9.7.0-rc2

ISC BIND=9.7.1

ISC BIND=9.7.1-p1

ISC BIND=9.7.1-p2

ISC BIND=9.7.1-rc1

ISC BIND=9.7.2

ISC BIND=9.7.2-p1

ISC BIND=9.7.2-p2

ISC BIND=9.7.2-p3

ISC BIND=9.7.2-rc1

ISC BIND=9.7.3

ISC BIND=9.7.3-b1

ISC BIND=9.7.3-p1

ISC BIND=9.7.3-rc1

ISC BIND=9.7.4

ISC BIND=9.7.4-b1

ISC BIND=9.7.4-p1

ISC BIND=9.7.4-rc1

ISC BIND=9.7.5

ISC BIND=9.7.5-b1

ISC BIND=9.7.5-rc1

ISC BIND=9.7.5-rc2

ISC BIND=9.7.6

ISC BIND=9.7.6-p1

ISC BIND=9.8.0

ISC BIND=9.8.0-a1

ISC BIND=9.8.0-b1

ISC BIND=9.8.0-p1

ISC BIND=9.8.0-p2

ISC BIND=9.8.0-p4

ISC BIND=9.8.0-rc1

ISC BIND=9.8.1

ISC BIND=9.8.1-b1

ISC BIND=9.8.1-b2

ISC BIND=9.8.1-b3

ISC BIND=9.8.1-p1

ISC BIND=9.8.1-rc1

ISC BIND=9.8.2-b1

ISC BIND=9.8.2-rc1

ISC BIND=9.8.2-rc2

ISC BIND=9.8.3

ISC BIND=9.8.3-p1

ISC BIND=9.9.0

ISC BIND=9.9.0-a1

ISC BIND=9.9.0-a2

ISC BIND=9.9.0-a3

ISC BIND=9.9.0-b1

ISC BIND=9.9.0-b2

ISC BIND=9.9.0-rc1

ISC BIND=9.9.0-rc2

ISC BIND=9.9.0-rc3

ISC BIND=9.9.0-rc4

ISC BIND=9.9.1

ISC BIND=9.9.1-p1

ISC BIND=9.6

ISC BIND=9.6-r5_p1

ISC BIND=9.6-r6_b1

ISC BIND=9.6-r6_rc1

ISC BIND=9.6-r6_rc2

ISC BIND=9.6-r7_p1

Event History

Jul 25, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3817?

CVE-2012-3817 is classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2012-3817?

To fix CVE-2012-3817, upgrade to ISC BIND version 9.7.6-P2 or newer, or apply the appropriate patches.

Which versions of ISC BIND are affected by CVE-2012-3817?

CVE-2012-3817 affects ISC BIND versions 9.4.x through 9.9.0, with specific versions listed in the CVE description.

Can CVE-2012-3817 be exploited remotely?

Yes, CVE-2012-3817 can be exploited remotely by attackers to cause denial of service.

Is DNSSEC validation related to CVE-2012-3817?

Yes, CVE-2012-3817 occurs when DNSSEC validation is enabled, highlighting the importance of proper configuration.