ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote…

Description

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.

Scores

EPSS (exploitation in 30 days)

32.7% · top 1.7% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a
• CWE-189 (opens in a new tab)Other CVEs with CWE-189

Affected products

• n/a

  • affected n/a

References (38)

• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• IV30365 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• IV30185 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• RHSA-2012:1363 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• SSA:2012-341-01 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
• 50909 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 50956 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 86118 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 50903 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 51096 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 51054 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2012:1365 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• SUSE-SU-2012:1390 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• FEDORA-2012-15965 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• openSUSE-SU-2012:1372 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• IV30366 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• IV30367 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• IV30368 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• 51106 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 51178 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• IV30247 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• http://www.isc.org/software/bind/advisories/cve-2012-5166 (opens in a new tab)x_refsource_CONFIRMx_transferred
• MDVSA-2012:162 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• APPLE-SA-2013-09-12-1 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• 51078 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2012:1364 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• https://kb.isc.org/article/AA-00801 (opens in a new tab)x_refsource_CONFIRMx_transferred
• FEDORA-2012-15981 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• http://aix.software.ibm.com/aix/efixes/security/bind9_advisory5.asc (opens in a new tab)x_refsource_CONFIRMx_transferred
• DSA-2560 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 (opens in a new tab)x_refsource_CONFIRMx_transferred
• oval:org.mitre.oval:def:19706 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 55852 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• IV30364 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
• https://blogs.oracle.com/sunsecurity/entry/cve_2012_5166_denial_of (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://support.apple.com/kb/HT5880 (opens in a new tab)x_refsource_CONFIRMx_transferred
• FEDORA-2012-16022 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2012-5166](https://trackcve.app/badge/CVE-2012-5166.svg)](https://trackcve.app/cve/CVE-2012-5166)

Record last updated 6 Aug 2024, 20:58 UTC.