← Back

CVE-2017-3135

nvd nist
Published: Jan 16, 2019Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

Affected (33)

Show all products
Isc: Bind · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Netapp: Data Ontap Edge, Element Software Management Node · Debian: Debian Linux
Isc
1 product
Bind
Redhat
6 products
Enterprise Linux Desktop
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Enterprise Linux Workstation
Netapp
2 products
Data Ontap Edge
Element Software Management Node
Debian
1 product
Debian Linux
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Bind
Version 9.10.0
Bind
Version 9.10.4 p1
Bind
Version 9.10.4 p2
Bind
Version 9.10.4 p3
Bind
Version 9.10.4 p4
Bind
Version 9.10.4 p5
Bind
Version 9.10.5 beta1
Bind
Version 9.11.0
Bind
Version 9.11.0 p1
Bind
Version 9.11.0 p2
Bind
Version 9.11.1 beta1
Bind
Version 9.9.10 beta1
Bind
Version 9.9.3
Bind
Version 9.9.3 s1
Bind
Version 9.9.8
Bind
Version 9.9.9 p5
Bind
Version 9.9.9 s7
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux Desktop
Version 7.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Server Aus
Version 7.3
Enterprise Linux Server Aus
Version 7.4
Enterprise Linux Server Aus
Version 7.6
Redhat
Enterprise Linux Server Eus
Version 7.3
Enterprise Linux Server Eus
Version 7.4
Enterprise Linux Server Eus
Version 7.5
Enterprise Linux Server Eus
Version 7.6
Redhat
Enterprise Linux Server Tus
Version 7.3
Enterprise Linux Server Tus
Version 7.6
Enterprise Linux Workstation
Version 7.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Data Ontap Edge
All versions
Element Software Management Node
All versions
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (16)

Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party AdvisoryVDB Entry
Source: security-officer@isc.org
Third Party AdvisoryVDB Entry
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Vendor Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.