CVE-2012-4244

Description

ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.

7.8

CVSS

Severity: High

CVSS 2.0 •

EPSS 48.88% Top 5%

Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory marc.info Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory fedoraproject.org Vendor Advisory mandriva.com Vendor Advisory fedoraproject.org Vendor Advisory opensuse.org Vendor Advisory apple.com Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory fedoraproject.org Vendor Advisory isc.org

Affected: n/a n/a

References

Link	Tags
http://www.debian.org/security/2012/dsa-2547	vendor advisory
http://www.ubuntu.com/usn/USN-1566-1	vendor advisory
http://marc.info/?l=bugtraq&m=141879471518471&w=2	vendor advisory
http://secunia.com/advisories/51096	third party advisory
http://secunia.com/advisories/50582	third party advisory
http://rhn.redhat.com/errata/RHSA-2012-1365.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2012-1266.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00021.html	vendor advisory
http://rhn.redhat.com/errata/RHSA-2012-1267.html	vendor advisory
http://www.securityfocus.com/bid/55522	vdb entry
http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087703.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:152	vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087697.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00022.html	vendor advisory
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html	vendor advisory
http://secunia.com/advisories/50579	third party advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
http://secunia.com/advisories/50645	third party advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00007.html	vendor advisory
https://kb.isc.org/article/AA-00778	vendor advisory
http://support.apple.com/kb/HT5880
http://rhn.redhat.com/errata/RHSA-2012-1268.html	vendor advisory
http://secunia.com/advisories/50560	third party advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088381.html	vendor advisory
http://secunia.com/advisories/50673	third party advisory
https://security.netapp.com/advisory/ntap-20221209-0008/

Frequently Asked Questions

What is the severity of CVE-2012-4244?: CVE-2012-4244 has been scored as a high severity vulnerability.
How to fix CVE-2012-4244?: To fix CVE-2012-4244, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2012-4244 being actively exploited in the wild?: It is possible that CVE-2012-4244 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~49% probability that this vulnerability will be exploited by malicious actors in the next 30 days.