What’s Vulnerable › Vulnerabilities

CVE-2012-3868

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-25 · updated 2026-06-16
• Weakness: CWE-362

Description

Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.

Affected products

• ISC BIND: 9.9.0, 9.9.0-a1, 9.9.0-a2, 9.9.0-a3, 9.9.0-b1, 9.9.0-b2 (+6)

References

• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
• https://kb.isc.org/article/AA-00730
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
• https://kb.isc.org/article/AA-00730

Get alerted when CVE-2012-3868 or the next vulnerability affects your stack