7.5
High
CVE-2017-3135 Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an…
Description
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND 9 | Versions not published |
References
- GLSA-201708-01 security.gentoo.org
- RHSA-2017:0276 rhn.redhat.com
- security.netapp.com security.netapp.com
- h20566.www2.hpe.com h20566.www2.hpe.com
- 96150 www.securityfocus.com
- 1037801 www.securitytracker.com
- DSA-3795 www.debian.org
- kb.isc.org kb.isc.org
Timeline
- Published
- Last modified
Other CVEs of BIND 9
The 87 CVEs of BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
High
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
High
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
High
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
High