CVE-2017-3135

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-3135
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2017-0276.html Third Party Advisory
http://www.securityfocus.com/bid/96150 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037801 Third Party Advisory VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us Third Party Advisory
https://kb.isc.org/docs/aa-01453 Vendor Advisory
https://security.gentoo.org/glsa/201708-01 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/ Third Party Advisory
https://www.debian.org/security/2017/dsa-3795 Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0276.html Third Party Advisory
http://www.securityfocus.com/bid/96150 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037801 Third Party Advisory VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us Third Party Advisory
https://kb.isc.org/docs/aa-01453 Vendor Advisory
https://security.gentoo.org/glsa/201708-01 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0005/ Third Party Advisory
https://www.debian.org/security/2017/dsa-3795 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.8:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.5:beta1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
History

21 Nov 2024, 03:24

Type Values Removed Values Added
CVSS v2 : 4.3
v3 : 5.9 		v2 : 4.3
v3 : 7.5
References () http://rhn.redhat.com/errata/RHSA-2017-0276.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2017-0276.html - Third Party Advisory
References () http://www.securityfocus.com/bid/96150 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/96150 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1037801 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1037801 - Third Party Advisory, VDB Entry
References () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us - Third Party Advisory () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us - Third Party Advisory
References () https://kb.isc.org/docs/aa-01453 - Vendor Advisory () https://kb.isc.org/docs/aa-01453 - Vendor Advisory
References () https://security.gentoo.org/glsa/201708-01 - Third Party Advisory () https://security.gentoo.org/glsa/201708-01 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20180926-0005/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20180926-0005/ - Third Party Advisory
References () https://www.debian.org/security/2017/dsa-3795 - Third Party Advisory () https://www.debian.org/security/2017/dsa-3795 - Third Party Advisory
Information

Published : 2019-01-16 20:29

Updated : 2024-11-21 03:24

NVD link : CVE-2017-3135

Mitre link : CVE-2017-3135

CVE.ORG link : CVE-2017-3135

JSON object : View

Products Affected

redhat

  • enterprise_linux_desktop
  • enterprise_linux_server_eus
  • enterprise_linux_server
  • enterprise_linux_workstation
  • enterprise_linux_server_aus
  • enterprise_linux_server_tus

netapp

  • element_software_management_node
  • data_ontap_edge

debian

  • debian_linux

isc

  • bind
CWE
CWE-476

NULL Pointer Dereference