VulnerabilityModified
CVE-2012-2978
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
MEDIUM 5.0EPSS 9.23%
Does this matter?
Lower severity and a low EPSS score (9.23%). Track it; it rarely justifies an emergency change on its own.
Description
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 9.23% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- nlnetlabs/nsd
- Source
- cret@cert.org
References
- http://osvdb.org/84097
- http://secunia.com/advisories/49795
- http://secunia.com/advisories/49997
- http://www.debian.org/security/2012/dsa-2515
- http://www.kb.cert.org/vuls/id/624931US Government Resource
- http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txtVendor Advisory
- http://www.securityfocus.com/bid/54606
- http://osvdb.org/84097
- http://secunia.com/advisories/49795
- http://secunia.com/advisories/49997
- http://www.debian.org/security/2012/dsa-2515
- http://www.kb.cert.org/vuls/id/624931US Government Resource
- http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txtVendor Advisory
- http://www.securityfocus.com/bid/54606
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.