CVE-2012-1667: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before...

Security readout for executives and security teams

CVE-2012-1667 affects ISC BIND DNS servers. A malicious or malformed DNS record from a remote DNS server can crash the daemon, corrupt data, or expose process memory. The main business risk is DNS outage, with possible information disclosure from memory. Organizations may be exposed if they run affected ISC BIND versions, especially recursive resolvers or authoritative DNS infrastructure that processes records from remote DNS servers. The bundle does not identify specific downstream package versions beyond vendor advisories. Handle as a high-priority infrastructure patch for DNS services. It is not listed as known exploited in the supplied data, but successful abuse could disrupt name resolution and potentially expose memory contents. Mitigation focus: Inventory all systems running ISC BIND or vendor-packaged BIND.; Upgrade to ISC fixed versions or supported vendor security updates.; Prioritize internet-facing DNS and recursive resolver infrastructure..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.