CVEvulnerability

CVE-2017-3135

5.9 MEDIUM Published 2019-01-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

Affected configurations

• isc bind 9.9.3 • isc bind 9.9.8 • isc bind 9.9.9 • isc bind 9.9.10 • isc bind 9.10.0 • isc bind 9.10.4 • isc bind 9.10.5 • isc bind 9.11.0 • isc bind 9.11.1 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.3 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server eus 7.3 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux server eus 7.6 • redhat enterprise linux server tus 7.3 • redhat enterprise linux server tus 7.6 • redhat enterprise linux workstation 7.0 • netapp data ontap edge • netapp element software management node • debian debian linux 8.0 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References