← Back

CVE-2017-3145

nvd nist
Published: Jan 16, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.

Affected (44)

Show all products
Isc: Bind · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Debian: Debian Linux · Netapp: Data Ontap Edge · Juniper: Junos
Isc
1 product
Bind
Redhat
6 products
Enterprise Linux Desktop
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Enterprise Linux Workstation
Debian
1 product
Debian Linux
Netapp
1 product
Data Ontap Edge
Juniper
1 product
Junos
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Bind
From 9.10.0 to 9.10.6
Bind
From 9.11.0 to 9.11.2
Bind
From 9.4.0 to 9.8.8
Bind
From 9.9.0 to 9.9.11
Bind
Version 9.10.5 s1
Bind
Version 9.10.6 s1
Bind
Version 9.12.0 alpha1
Bind
Version 9.12.0 b1
Bind
Version 9.12.0 b2
Bind
Version 9.12.0 rc1
Bind
Version 9.9.11 s1
Bind
Version 9.9.3 s1
Configuration B
22 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Desktop
Version 6.0
Enterprise Linux Desktop
Version 7.0
Redhat
Enterprise Linux Server
Version 6.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Server Aus
Version 6.4
Enterprise Linux Server Aus
Version 6.5
Enterprise Linux Server Aus
Version 6.6
Enterprise Linux Server Aus
Version 7.2
Enterprise Linux Server Aus
Version 7.3
Enterprise Linux Server Aus
Version 7.4
Enterprise Linux Server Aus
Version 7.6
Redhat
Enterprise Linux Server Eus
Version 6.7
Enterprise Linux Server Eus
Version 7.3
Enterprise Linux Server Eus
Version 7.4
Enterprise Linux Server Eus
Version 7.5
Enterprise Linux Server Eus
Version 7.6
Redhat
Enterprise Linux Server Tus
Version 6.6
Enterprise Linux Server Tus
Version 7.2
Enterprise Linux Server Tus
Version 7.3
Enterprise Linux Server Tus
Version 7.6
Redhat
Enterprise Linux Workstation
Version 6.0
Enterprise Linux Workstation
Version 7.0
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 7.0
Debian Linux
Version 8.0
Debian Linux
Version 9.0
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Data Ontap Edge
All versions
Configuration E
6 vulnerable · 28 platform
Vulnerable SoftwareAffected Versions
Juniper
Junos
Version 12.1x46-d76
Junos
Version 12.3x48-d70
Junos
Version 15.1x49-d140
Junos
Version 17.4r2
Junos
Version 18.1r2
Junos
Version 18.2r1
Running on/withPlatform Versions
Juniper
Srx100
All versions
Juniper
Srx110
All versions
Juniper
Srx1400
All versions
Juniper
Srx1500
All versions
Juniper
Srx210
All versions
Juniper
Srx220
All versions
Juniper
Srx240
All versions
Juniper
Srx240h2
All versions
Juniper
Srx240m
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx3400
All versions
Juniper
Srx345
All versions
Juniper
Srx3600
All versions
Juniper
Srx380
All versions
Juniper
Srx4000
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4600
All versions
Juniper
Srx5000
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx550 Hm
All versions
Juniper
Srx550m
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Juniper
Srx650
All versions

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (22)

Source: security-officer@isc.org
Broken LinkThird Party AdvisoryVDB Entry
Source: security-officer@isc.org
Broken LinkThird Party AdvisoryVDB Entry
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Vendor Advisory
Source: security-officer@isc.org
Mailing ListThird Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.