CVE-2012-1191: D.j.bernstein Djbdns

Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days.

The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Affected products

• D.j.bernstein Djbdns: version 1.05 only

Published 2012-02-17. Last modified 2026-06-16.