5.9
Moyenne
CVE-2017-3136 A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and…
Description
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND 9 | Versions non publiées |
Références
- RHSA-2017:1095 access.redhat.com
- GLSA-201708-01 security.gentoo.org
- security.netapp.com security.netapp.com
- h20566.www2.hpe.com h20566.www2.hpe.com
- DSA-3854 www.debian.org
- 1038259 www.securitytracker.com
- 97653 www.securityfocus.com
- RHSA-2017:1105 access.redhat.com
- kb.isc.org kb.isc.org
- openSUSE-SU-2020:1699 lists.opensuse.org
- openSUSE-SU-2020:1701 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIND 9
Les 87 CVE de BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
Élevée
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
Élevée
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
Élevée
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
Élevée