CVE-2017-3136 An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
MediumCVSS 5.9
EPSS 11.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bind9(Debian:12) | < 1:9.10.3.dfsg.P4-12.3 | 1:9.10.3.dfsg.P4-12.3 |
| debian/bind9(Debian:13) | < 1:9.10.3.dfsg.P4-12.3 | 1:9.10.3.dfsg.P4-12.3 |
| debian/bind9(Debian:14) | < 1:9.10.3.dfsg.P4-12.3 | 1:9.10.3.dfsg.P4-12.3 |
| isc bind | >= 9.8.0, <= 9.8.8 | No fix listed |
| isc bind | >= 9.9.0, <= 9.9.9 | No fix listed |
| isc bind | >= 9.10.0, <= 9.10.4 | No fix listed |
| isc bind | = 9.8.0-p1 | No fix listed |
| isc bind | = 9.9.0-p1 | No fix listed |
| isc bind | = 9.9.0-p2 | No fix listed |
| isc bind | = 9.9.0-p3 | No fix listed |
| isc bind | = 9.9.0-p4 | No fix listed |
| isc bind | = 9.9.0-p5 | No fix listed |
| isc bind | = 9.9.0-p6 | No fix listed |
| isc bind | = 9.9.3 | No fix listed |
| isc bind | = 9.9.3-s1 | No fix listed |
| isc bind | = 9.9.10-beta1 | No fix listed |
| isc bind | = 9.9.10-rc1 | No fix listed |
| isc bind | = 9.10.4-p1 | No fix listed |
| isc bind | = 9.10.4-p2 | No fix listed |
| isc bind | = 9.10.4-p3 | No fix listed |
| isc bind | = 9.10.4-p4 | No fix listed |
| isc bind | = 9.10.4-p5 | No fix listed |
| isc bind | = 9.10.4-p6 | No fix listed |
| isc bind | = 9.10.5-b1 | No fix listed |
| isc bind | = 9.10.5-rc1 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | = 9.11.0 | No fix listed |
| isc bind | = 9.11.0-p1 | No fix listed |
| isc bind | = 9.11.0-p2 | No fix listed |
| isc bind | = 9.11.0-p3 | No fix listed |
| isc bind | = 9.11.1-beta1 | No fix listed |
| isc bind | = 9.11.1-rc1 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp element software | All versions | No fix listed |
| netapp oncommand balance | All versions | No fix listed |
| debian linux | = 8.0 | No fix listed |
| alpine/bind(Alpine:v3.10) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.11) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.12) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.13) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.14) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.15) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.16) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.17) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.18) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.19) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.2) | >= 9.8.0, < 9.10.4_p8 | 9.10.4_p8 |
| alpine/bind(Alpine:v3.20) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.21) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.22) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.23) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.24) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.3) | >= 9.8.0, < 9.10.4_p8-r0 | 9.10.4_p8-r0 |
| alpine/bind(Alpine:v3.5) | >= 9.8.0, < 9.10.4_p8-r0 | 9.10.4_p8-r0 |
| alpine/bind(Alpine:v3.6) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.7) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.8) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| alpine/bind(Alpine:v3.9) | >= 9.8.0, < 9.11.0_p5-r0 | 9.11.0_p5-r0 |
| isc BIND 9 | = 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8 | No fix listed |
References
- Debian Security Tracker CVE-2017-3136 vendor-advisory
- openSUSE-SU-2020:1699 vendor-advisory
- openSUSE-SU-2020:1701 vendor-advisory
- 97653 third-party-advisory vdb-entry
- 1038259 third-party-advisory vdb-entry
- RHSA-2017:1095 third-party-advisory vendor-advisory
- RHSA-2017:1105 third-party-advisory vendor-advisory
- h20566.www2.hpe.com third-party-advisory
- kb.isc.org vendor-advisory
- GLSA-201708-01 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- DSA-3854 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking