Vulnerability Report

CVE-2012-5166

Title: Isc Bind Denial of Service (DoS)

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2012-5166.

CWE Category CWE-189

Published Date Oct 10, 2012

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 7.8 CVSS v2.0

Exploit Probability (EPSS)

34.20%

Vulnerability Summary

CVE-2012-5166: ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.

Impacted Vendors

isc 1

Reference Links

http://aix.software.ibm.com/aix/efixes/security/bind9_advisory5.asc http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090346.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090491.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090586.html http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00013.html http://osvdb.org/86118 http://rhn.redhat.com/errata/RHSA-2012-1363.html http://rhn.redhat.com/errata/RHSA-2012-1364.html http://rhn.redhat.com/errata/RHSA-2012-1365.html http://secunia.com/advisories/50903 http://secunia.com/advisories/50909 http://secunia.com/advisories/50956 http://secunia.com/advisories/51054 http://secunia.com/advisories/51078 http://secunia.com/advisories/51096 http://secunia.com/advisories/51106 http://secunia.com/advisories/51178 http://support.apple.com/kb/HT5880 http://www.debian.org/security/2012/dsa-2560 http://www.ibm.com/support/docview.wss?uid=isg1IV30185 http://www.ibm.com/support/docview.wss?uid=isg1IV30247 http://www.ibm.com/support/docview.wss?uid=isg1IV30364 http://www.ibm.com/support/docview.wss?uid=isg1IV30365 http://www.ibm.com/support/docview.wss?uid=isg1IV30366 http://www.ibm.com/support/docview.wss?uid=isg1IV30367 http://www.ibm.com/support/docview.wss?uid=isg1IV30368 http://www.isc.org/software/bind/advisories/cve-2012-5166 http://www.mandriva.com/security/advisories?name=MDVSA-2012:162 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.securityfocus.com/bid/55852 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf https://blogs.oracle.com/sunsecurity/entry/cve_2012_5166_denial_of https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 https://kb.isc.org/article/AA-00801 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19706 http://aix.software.ibm.com/aix/efixes/security/bind9_advisory5.asc http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090346.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090491.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090586.html http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00013.html http://osvdb.org/86118 http://rhn.redhat.com/errata/RHSA-2012-1363.html http://rhn.redhat.com/errata/RHSA-2012-1364.html http://rhn.redhat.com/errata/RHSA-2012-1365.html http://secunia.com/advisories/50903 http://secunia.com/advisories/50909 http://secunia.com/advisories/50956 http://secunia.com/advisories/51054 http://secunia.com/advisories/51078 http://secunia.com/advisories/51096 http://secunia.com/advisories/51106 http://secunia.com/advisories/51178 http://support.apple.com/kb/HT5880 http://www.debian.org/security/2012/dsa-2560 http://www.ibm.com/support/docview.wss?uid=isg1IV30185 http://www.ibm.com/support/docview.wss?uid=isg1IV30247 http://www.ibm.com/support/docview.wss?uid=isg1IV30364 http://www.ibm.com/support/docview.wss?uid=isg1IV30365 http://www.ibm.com/support/docview.wss?uid=isg1IV30366 http://www.ibm.com/support/docview.wss?uid=isg1IV30367 http://www.ibm.com/support/docview.wss?uid=isg1IV30368 http://www.isc.org/software/bind/advisories/cve-2012-5166 http://www.mandriva.com/security/advisories?name=MDVSA-2012:162 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.securityfocus.com/bid/55852 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf https://blogs.oracle.com/sunsecurity/entry/cve_2012_5166_denial_of https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 https://kb.isc.org/article/AA-00801 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19706

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.8

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2012-5166 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

October 10, 2012 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected Stack

No specific products linked.