CVE-2012-2978 Null dereference in n/a
Remote attackers can crash the NSD DNS server child process via a crafted DNS packet, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-2978?
CVE-2012-2978 is a medium-severity vulnerability in n/a, published on 27 Jul 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
Weakness: CWE-119
Which versions are affected by CVE-2012-2978?
It affects 1 product.
Products include Nlnetlabs Nsd.
How do I fix CVE-2012-2978?
Upgrade to a fixed version.
Is CVE-2012-2978 being exploited?
There is no known exploitation of CVE-2012-2978 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-12244 Heap overflow and crash with crafted SVCB RR
- CVE-2026-12245 Denial of DNS over TLS service by any DoT client
- CVE-2026-18664 Wrong interpretation of ACL ranges
- CVE-2026-19401 Remote UDP DoS by sending multiple DNS Cookie options
- CVE-2026-19538 Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
Sources
Also known as DSA-2515-1, GHSA-wgh7-q8c2-58gg.