← Back

CVE-2017-3139

nvd nist
Published: Apr 9, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.

Affected (7)

Redhat
3 products
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Server Aus
Version 6.2
Enterprise Linux Server Aus
Version 6.4
Enterprise Linux Server Aus
Version 6.5
Enterprise Linux Server Aus
Version 6.6
Enterprise Linux Server Eus
Version 6.7
Redhat
Enterprise Linux Server Tus
Version 6.5
Enterprise Linux Server Tus
Version 6.6

Related CWEs

CWE-617
Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (4)

Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory

Timeline

No history available yet.