Unscored severity · published Jul 27, 2012
CVE-2012-2978
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process…
–
CVSS
9.2%
EPSS
No
On KEV
Description
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nsd · Nlnetlabs
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2978
osvdb.org
http://osvdb.org/84097
secunia.com
http://secunia.com/advisories/49795
secunia.com
http://secunia.com/advisories/49997
www.debian.org
http://www.debian.org/security/2012/dsa-2515
US Government Resource
http://www.kb.cert.org/vuls/id/624931
Vendor Advisory
http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt
More from Nsd
9.1
CVE-2026-18664
Wrong interpretation of ACL ranges
8.8
CVE-2026-12244
Heap overflow and crash with crafted SVCB RR
8.1
CVE-2026-12246
Out of bounds stack write with crafted APL RR
7.5
CVE-2026-19538
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
7.5
CVE-2026-19401
Remote UDP DoS by sending multiple DNS Cookie options