{"id":"CVE-2017-3135","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-3135","generatedAt":"2026-10-28T20:09:07.898Z","title":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer.","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.","published":"2019-01-16T20:29:00.000Z","lastModified":"2026-06-17T01:17:35.000Z","status":"Modified","sourceIdentifier":"security-officer@isc.org","cvss":{"version":"3.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-476"],"affected":["isc/bind","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","netapp/data ontap edge","netapp/element software management node","debian/debian linux"],"epss":{"score":0.17243,"percentile":0.97085,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.15671,"percentile":0.96752},{"date":"2026-09-22","score":0.17243,"percentile":0.96962}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 17.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0276.html","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"http://www.securityfocus.com/bid/96150","tags":["Third Party Advisory","VDB Entry"],"source":"security-officer@isc.org"},{"url":"http://www.securitytracker.com/id/1037801","tags":["Third Party Advisory","VDB Entry"],"source":"security-officer@isc.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"https://kb.isc.org/docs/aa-01453","tags":["Vendor Advisory"],"source":"security-officer@isc.org"},{"url":"https://security.gentoo.org/glsa/201708-01","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"https://security.netapp.com/advisory/ntap-20180926-0005/","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"https://www.debian.org/security/2017/dsa-3795","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0276.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/96150","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037801","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/docs/aa-01453","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201708-01","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180926-0005/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-3795","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-3135","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}