MNBSD-2012-1: named crash from zero-length resource record data

Description

A defect in BIND's handling of resource records allows a request with zero-length rdata to crash named(8), resulting in a denial of service or possible disclosure of information. Systems running the BIND name server are affected.

Affected Versions

bind

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-12:03.bind.asc
• https://www.cve.org/CVERecord?id=CVE-2012-1667

Additional Information

Aliases: CVE-2012-1667

Published: June 06, 2012
Last Modified: June 06, 2012