Denial of Service Vulnerability in NSD Product by NLnet Labs
CVE-2012-2978

Currently unrated

Key Information:

Vendor

Nlnetlabs

Status
Nsd
Vendor
CVE Published:
27 July 2012

What is CVE-2012-2978?

A vulnerability in NSD (Name Server Daemon) versions 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x prior to 3.2.12 allows remote attackers to exploit malformed DNS packets. This can lead to a denial of service through a NULL pointer dereference, causing the affected process to crash and disrupting DNS services.

References

http://osvdb.org/84097
vdb-entryx_refsource_OSVDB
http://www.kb.cert.org/vuls/id/624931
third-party-advisoryx_refsource_CERT-VN
http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt
x_refsource_CONFIRM

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.