Servers and applications
CVE-2012-1033 The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Severity Medium 5.0
Published 8 Feb 2012
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 13% in the next 30 daysHigher than 96% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Change some data
CVSS vector AV:N/AC:L/Au:N/C:N/I:P/A:N
Sources NVD Affected software Software Affected versions BIND 9Servers and applications · cpe:a:isc:bind Version 9.8.1-p1 Version 9.8.1 Version 9.8.1-rc1 Version 9.8.1-b3 All 68 release lines Version 9.0 Version 9.0.1 Version 9.1 Version 9.1.1 Version 9.1.2 Version 9.1.3 Version 9.2 Version 9.2.1 Version 9.2.2 Version 9.2.2-p3 Version 9.2.3 Version 9.2.4 Version 9.2.5 Version 9.2.6 Version 9.2.7 Version 9.3 Version 9.3.1 Version 9.3.2 Version 9.3.3 Version 9.4.0-rc1 Version 9.4 Version 9.4.1 Version 9.4.2 Version 9.4.3-rc1 Version 9.4.3 Version 9.5.0-rc1 Version 9.5 Version 9.5.1-rc1 Version 9.5.1-rc2 Version 9.5.1 Version 9.6.0-rc1 Version 9.6.0-rc2 Version 9.6.0 Version 9.6.0-p1 Version 9.7.0-b1 Version 9.7.0-rc1 Version 9.7.0-rc2 Version 9.7.0 Version 9.7.0-p1 Version 9.7.0-p2 Version 9.7.1-rc1 Version 9.7.1 Version 9.7.1-p1 Version 9.7.1-p2 Version 9.7.2-rc1 Version 9.7.2 Version 9.7.2-p1 Version 9.7.2-p2 Version 9.7.2-p3 Version 9.7.3-b1 Version 9.7.3-rc1 Version 9.7.3 Version 9.7.3-p1 Version 9.7.4-b1 Version 9.7.4 Version 9.8.0-a1 Version 9.8.0-b1 Version 9.8.0-rc1 Version 9.8.0 Version 9.8.0-p1 Version 9.8.0-p2 Version 9.8.0-p4 Version 9.8.1-b1 Version 9.8.1-b2 Version 9.8.1-b3 Version 9.8.1-rc1 Version 9.8.1 Version 9.8.1-p1
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-1033 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-1033