CVE-2017-3135 Combination of DNS64 and RPZ Can Lead to Crash
MediumCVSS 5.9
EPSS 17.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bind9(Debian:12) | < 1:9.10.3.dfsg.P4-12 | 1:9.10.3.dfsg.P4-12 |
| debian/bind9(Debian:13) | < 1:9.10.3.dfsg.P4-12 | 1:9.10.3.dfsg.P4-12 |
| debian/bind9(Debian:14) | < 1:9.10.3.dfsg.P4-12 | 1:9.10.3.dfsg.P4-12 |
| isc bind | = 9.9.3 | No fix listed |
| isc bind | = 9.9.3-s1 | No fix listed |
| isc bind | = 9.9.8 | No fix listed |
| isc bind | = 9.9.9-p5 | No fix listed |
| isc bind | = 9.9.9-s7 | No fix listed |
| isc bind | = 9.9.10-beta1 | No fix listed |
| isc bind | = 9.10.0 | No fix listed |
| isc bind | = 9.10.4-p1 | No fix listed |
| isc bind | = 9.10.4-p2 | No fix listed |
| isc bind | = 9.10.4-p3 | No fix listed |
| isc bind | = 9.10.4-p4 | No fix listed |
| isc bind | = 9.10.4-p5 | No fix listed |
| isc bind | = 9.10.5-beta1 | No fix listed |
| isc bind | = 9.11.0 | No fix listed |
| isc bind | = 9.11.0-p1 | No fix listed |
| isc bind | = 9.11.0-p2 | No fix listed |
| isc bind | = 9.11.1-beta1 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp element software management node | All versions | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/bind(Alpine:v3.2) | < 9.10.4_p6-r0 | 9.10.4_p6-r0 |
| alpine/bind(Alpine:v3.3) | < 9.10.4_p6-r0 | 9.10.4_p6-r0 |
| alpine/bind(Alpine:v3.4) | < 9.10.4_p6-r0 | 9.10.4_p6-r0 |
| alpine/bind(Alpine:v3.5) | < 9.10.4_p6-r0 | 9.10.4_p6-r0 |
| isc BIND 9 | = BIND 9 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1 | No fix listed |
References
- Debian Security Tracker CVE-2017-3135 vendor-advisory
- RHSA-2017:0276 third-party-advisory vendor-advisory
- 96150 third-party-advisory vdb-entry
- 1037801 third-party-advisory vdb-entry
- h20566.www2.hpe.com third-party-advisory
- kb.isc.org vendor-advisory
- GLSA-201708-01 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- DSA-3795 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking