CVE-2012-3868
Severity CVSS v4.0:
Pending analysis
Type:
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
25/07/2012
Last modified:
25/11/2013
Description
Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:isc:bind:9.9.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:a1:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:a2:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:a3:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:b1:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:b2:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:rc1:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:rc2:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:rc3:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.0:rc4:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:isc:bind:9.9.1:p1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page