CVE-2012-1667

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4-ESV through 9.6-ESV-R7-P1 ISC BIND versions 9.7.x through 9.7.6-P1 ISC BIND versions 9.8.x through 9.8.3-P1 ISC BIND versions 9.9.x through 9.9.1-P1

Description The issue arises from improper handling of resource records with a zero-length RDATA section, allowing remote DNS servers to cause a denial of service, such as daemon crash or data corruption, or obtain sensitive information from process memory via a specifically crafted record.

Recommendations For ISC BIND versions 9.4-ESV through 9.6-ESV-R7-P1, update to version 9.6-ESV-R7-P1 or later. For ISC BIND versions 9.7.x through 9.7.6-P1, update to version 9.7.6-P1 or later. For ISC BIND versions 9.8.x through 9.8.3-P1, update to version 9.8.3-P1 or later. For ISC BIND versions 9.9.x through 9.9.1-P1, update to version 9.9.1-P1 or later.