CVE-2017-3135

Description

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

References

https://www.debian.org/security/2017/dsa-3795

https://security.netapp.com/advisory/ntap-20180926-0005/

https://security.gentoo.org/glsa/201708-01

https://kb.isc.org/docs/aa-01453

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us

http://www.securitytracker.com/id/1037801

http://www.securityfocus.com/bid/96150

http://rhn.redhat.com/errata/RHSA-2017-0276.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3