CVE-2017-3135
Combination of DNS64 and RPZ Can Lead to Crash
En bref Sévérité HIGH 7.5 EPSS EPSS 17.24 % · centile 97 (2026-10-27) État PUBLISHED Publiée 2019-01-16 Mise à jour 2024-09-16 Attribuée par isc Statut NVD Modified Description Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H isc CVSS 3.0 HIGH 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · security-officer@isc.org (Secondary) CVSS 3.0 MEDIUM 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.8:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.5:beta1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*Produits affectés Produit Versions ISC · BIND 9 affected BIND 9 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1
Références
Sources
