VULNERABILITY INTELLIGENCE

CVE-2012-3868

CVSS score4.3 MEDIUM
EPSS probability2.72%
CISA KEVNot currently listed
Published2012-07-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references