Vulnerability & Exploit Database

Back to search

RHSA-2012:1363: bind security update

Severity CVSS Published Added Modified
8 (AV:N/AC:L/Au:N/C:N/I:N/A:C) October 10, 2012 October 16, 2012 July 04, 2017


The Berkeley Internet Name Domain (BIND) is an implementation of theDomain Name System (DNS) protocols. BIND includes a DNS server (named); aresolver library (routines for applications to use when interfacing withDNS); and tools for verifying that the DNS server is operating correctly.A flaw was found in the way BIND handled certain combinations of resourcerecords. A remote attacker could use this flaw to cause a recursiveresolver, or an authoritative server in certain configurations, to lockup.(CVE-2012-5166)Users of bind are advised to upgrade to these updated packages, whichcorrect this issue. After installing the update, the BIND daemon (named)will be restarted automatically.

Free Nexpose Download

Discover, prioritize, and remediate security risks today!

 Download now




Related Vulnerabilities