CVE-2017-3136

Published: Jan 16, 2019Modified: Nov 21, 2024

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

Affected (47)

Products: Isc: Bind · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Netapp: Data Ontap Edge, Element Software, Oncommand Balance · +1 more

Show all products

Isc: Bind · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Netapp: Data Ontap Edge, Element Software, Oncommand Balance · Debian: Debian Linux

Isc

1 product

Bind

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

3 products

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.10.0 to 9.10.4
Isc Bind	From 9.8.0 to 9.8.8
Isc Bind	From 9.9.0 to 9.9.9
Isc Bind	Version 9.10.4 p1
Isc Bind	Version 9.10.4 p2
Isc Bind	Version 9.10.4 p3
Isc Bind	Version 9.10.4 p4
Isc Bind	Version 9.10.4 p5
Isc Bind	Version 9.10.4 p6
Isc Bind	Version 9.10.5 b1
Isc Bind	Version 9.10.5 rc1
Isc Bind	Version 9.11.0
Isc Bind	Version 9.11.0 p1
Isc Bind	Version 9.11.0 p2
Isc Bind	Version 9.11.0 p3
Isc Bind	Version 9.11.1 beta1
Isc Bind	Version 9.11.1 rc1
Isc Bind	Version 9.8.0 p1
Isc Bind	Version 9.9.0 p1
Isc Bind	Version 9.9.0 p2
Isc Bind	Version 9.9.0 p3
Isc Bind	Version 9.9.0 p4
Isc Bind	Version 9.9.0 p5
Isc Bind	Version 9.9.0 p6
Isc Bind	Version 9.9.10 beta1
Isc Bind	Version 9.9.10 rc1
Isc Bind	Version 9.9.3
Isc Bind	Version 9.9.3 s1

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Eus	Version 7.3
Redhat Enterprise Linux Server Eus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 7.5
Redhat Enterprise Linux Server Eus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0