CVE-2012-2978

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/84097
http://secunia.com/advisories/49795
http://secunia.com/advisories/49997
http://www.debian.org/security/2012/dsa-2515
http://www.kb.cert.org/vuls/id/624931	US Government Resource
http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt	Vendor Advisory
http://www.securityfocus.com/bid/54606

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nlnetlabs:nsd:3.0.0:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.1:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.2:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.3:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.4:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.5:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.6:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.7:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.0.8:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:nlnetlabs:nsd:3.1.0:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.1.1:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:nlnetlabs:nsd:3.2.0:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.1:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.3:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.4:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.5:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.6:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.7:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.8:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.9:::::::*
	cpe:2.3:a:nlnetlabs:nsd:3.2.10:::::::*

History

No history.

Information

Published : 2012-07-27 10:27

Updated : 2023-12-10 11:16

NVD link : CVE-2012-2978

Mitre link : CVE-2012-2978

CVE.ORG link : CVE-2012-2978

JSON object : View

Products Affected

nlnetlabs

nsd

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2012-2978", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-27T10:27:49.260", "references": [{"url": "http://osvdb.org/84097", "source": "cret@cert.org"}, {"url": "http://secunia.com/advisories/49795", "source": "cret@cert.org"}, {"url": "http://secunia.com/advisories/49997", "source": "cret@cert.org"}, {"url": "http://www.debian.org/security/2012/dsa-2515", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/624931", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/54606", "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet."}, {"lang": "es", "value": "query.c en NSD v3.0.x hasta v3.0.8, v3.1.x hasta v3.1.1, y v3.2.x antes de v3.2.12 permite a atacantes remotos causar una denegaci\u00f3n de servicio (eliminar la referencia del puntero NULL y ca\u00edda en un proceso hijo) a trav\u00e9s de un paquete DNS modificado."}], "lastModified": "2017-12-22T02:29:10.823", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E347F8C-AB1F-4967-9C85-055214798ECE"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DEDA235-5B80-4816-86C5-C83A45878A3E"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22BC2EBF-9241-4FE1-A730-9F9BB6E2777C"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3180CAA2-1518-4750-98DE-F64821297034"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56BCFAEA-AC1F-4D3E-B473-A6081D423BEB"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEA25A60-DD5F-4FE8-A6CC-1695232E3D95"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C326A66B-457E-4130-A214-ED265576F448"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "140464BA-39D7-4B63-92F9-9D6E09CFF6DE"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E86C924A-6CD8-4D9A-8CFC-E4AD4CC9331E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A818B06C-8798-460D-AE5A-93162CB758A0"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3755E217-23CB-42EF-90E8-020D5796226B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F341E55C-DB91-4D7B-91AE-076525C52A1F"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "760CF611-A8BF-4E96-9F21-0796FBC8A521"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5A52D5D-F34E-4148-A1B5-41668CAF4370"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC6AED26-55BB-449E-815E-532C0DD24B26"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "608E8EA7-9875-42E7-B8A4-9CE5EAE1B403"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE30D876-F03D-4BAA-BC1B-BEF22CD159E0"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FC27746-21C8-4949-A099-7BFCBB21A368"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39D5DB56-E99F-4B2D-815D-D697ACB352FE"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C3BFA93-297D-4EFB-AF7E-0C451B47C23B"}, {"criteria": "cpe:2.3:a:nlnetlabs:nsd:3.2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B605C0B-213F-4626-A30C-D13C0D4635D8"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}