7.5
Élevée
CVE-2017-3135 Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an…
Description
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND 9 | Versions non publiées |
Références
- GLSA-201708-01 security.gentoo.org
- RHSA-2017:0276 rhn.redhat.com
- security.netapp.com security.netapp.com
- h20566.www2.hpe.com h20566.www2.hpe.com
- 96150 www.securityfocus.com
- 1037801 www.securitytracker.com
- DSA-3795 www.debian.org
- kb.isc.org kb.isc.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIND 9
Les 87 CVE de BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
Élevée
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
Élevée
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
Élevée
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
Élevée