CVE-2012-1033: The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records dur...

Security readout for executives and security teams

This flaw can let attackers keep a revoked domain name resolving through vulnerable ISC BIND recursive DNS caches. For executives, the main risk is trust failure in DNS-dependent controls, especially in old infrastructure that still runs BIND 9 through 9.8.1-P1. Exposure is most likely in legacy recursive DNS resolvers running ISC BIND 9 through 9.8.1-P1 or vendor packages based on those releases. Current exposure cannot be inferred from the bundle. Medium priority for most organizations, higher if legacy BIND resolvers remain in production. The issue is old, but DNS resolver compromise can undermine domain revocation assumptions and security controls. Mitigation focus: Inventory recursive DNS servers and identify ISC BIND versions in use.; Check ISC and operating-system vendor advisories for the correct fixed package.; Upgrade or replace affected BIND packages through supported vendor channels..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.