CVE-2012-1191 The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote at...
MediumCVSS 6.4
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/djbdns(Debian:12) | < 1:1.05-10 | 1:1.05-10 |
| debian/djbdns(Debian:13) | < 1:1.05-10 | 1:1.05-10 |
| debian/djbdns(Debian:14) | < 1:1.05-10 | 1:1.05-10 |
| d.j.bernstein djbdns | = 1.05 | No fix listed |
| ubuntu/djbdns(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2012-1191 vendor-advisory
- www.isc.org exploit