PT-2012-1039 · Nlnet+1 · Nsd+1

Lubos Slovak + 1 · Published 2012-07-27 · Updated 2017-12-22 · CVE-2012-2978

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NSD versions 3.0.x through 3.0.8 NSD versions 3.1.x through 3.1.1 NSD versions 3.2.x before 3.2.12

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and child process crash, via a crafted DNS packet. Multiple vulnerabilities in the nsd3 package may lead to disruption of protected information availability, and exploitation can be done remotely.

Recommendations For NSD versions 3.0.x through 3.0.8, update to a version after 3.0.8 to resolve the issue. For NSD versions 3.1.x through 3.1.1, update to a version after 3.1.1 to resolve the issue. For NSD versions 3.2.x before 3.2.12, update to version 3.2.12 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1813

BDU:2015-02165

CVE-2012-2978

DSA-2515-1

Affected Products

Alt Linux

Nsd

References · 17

• https://errata.altlinux.org/ALT-PU-2015-1813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2978 · Security Note
• http://debian.org/security/2012/dsa-2515 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2978 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2978 · Security Note
• http://nlnetlabs.nl/downloads/CVE-2012-2978.txt · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-2978 · Security Note
• https://bdu.fstec.ru/vul/2015-02165 · Security Note
• https://ubuntu.com/security/CVE-2012-2978 · Vendor Advisory
• http://kb.cert.org/vuls/id/624931 · Note
• http://debian.org/security/dsa-2515 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2012-2978 · Note
• http://security-tracker.debian.org/tracker/DSA-2515-1 · Note
• http://secunia.com/advisories/49795 · Note
• http://secunia.com/advisories/49997 · Note