CVE-2017-3135

MEDIUM 5.9CVE-2017-3135 · Published 16/01/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
bind isc	`= 9.10.0= 9.10.4= 9.10.5= 9.11.0= 9.11.1= 9.9.10= 9.9.3= 9.9.8= 9.9.9`	No fix yet

Description

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

References

rhn.redhat.com/errata/RHSA-2017-0276.html · Third Party Advisory
securityfocus.com/bid/96150 · Third Party Advisory
securitytracker.com/id/1037801 · Third Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display · Third Party Advisory
kb.isc.org/docs/aa-01453 · Vendor Advisory
security.gentoo.org/glsa/201708-01 · Third Party Advisory
security.netapp.com/advisory/ntap-20180926-0005 · Third Party Advisory
debian.org/security/2017/dsa-3795 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free