CVE-2012-1193

MEDIUM 6.4CVE-2012-1193 · Published 17/02/2012 · updated 16/06/2026

In short

CVE-2012-1193 is a MEDIUM (CVSS 6.4) vulnerability affecting powerdns recursor (powerdns).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
powerdns recursor powerdns	`= 3.3`	No fix yet

Description

The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

References

lists.fedoraproject.org/pipermail/package-announce/2013-April/102729.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/104173.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html
isc.org/files/imce/ghostdomain_camera.pdf · Exploit

More vulnerabilities in powerdns recursor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free