CVE-2017-3135
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 17.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 17.24% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- isc/bind · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · netapp/data ontap edge · netapp/element software management node · debian/debian linux
- Source
- security-officer@isc.org
References
- http://rhn.redhat.com/errata/RHSA-2017-0276.htmlThird Party Advisory
- http://www.securityfocus.com/bid/96150Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037801Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_usThird Party Advisory
- https://kb.isc.org/docs/aa-01453Vendor Advisory
- https://security.gentoo.org/glsa/201708-01Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
- https://www.debian.org/security/2017/dsa-3795Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0276.htmlThird Party Advisory
- http://www.securityfocus.com/bid/96150Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037801Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_usThird Party Advisory
- https://kb.isc.org/docs/aa-01453Vendor Advisory
- https://security.gentoo.org/glsa/201708-01Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
- https://www.debian.org/security/2017/dsa-3795Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.