CVE-2017-3136
An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
At a glance Severity MEDIUM 5.9 EPSS EPSS 11.18 % · percentile 96 (2026-10-27) State PUBLISHED Published 2019-01-16 Updated 2024-09-17 Assigner isc NVD status Modified Description A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H isc CVSS 3.0 MEDIUM 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · security-officer@isc.org (Secondary) CVSS 3.0 MEDIUM 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* ≥ 9.8.0 ≤ 9.8.8cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* ≥ 9.9.0 ≤ 9.9.9cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* ≥ 9.10.0 ≤ 9.10.4cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p3:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p4:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p5:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.0:p6:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*+7 more Affected products Product Versions ISC · BIND 9 affected 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8
References
Sources
