CVE-2017-3136

Fixed in a distro release EPSS 11%CVSS 5.9

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

Published 2019-01-16 · CVE record · OSV

Products: ISC BIND 9

Distro releases

Release	Package	Fixed in
Alpine:v3.10	bind	9.11.0_p5-r0
Alpine:v3.11	bind	9.11.0_p5-r0
Alpine:v3.12	bind	9.11.0_p5-r0
Alpine:v3.13	bind	9.11.0_p5-r0
Alpine:v3.14	bind	9.11.0_p5-r0
Alpine:v3.15	bind	9.11.0_p5-r0
Alpine:v3.16	bind	9.11.0_p5-r0
Alpine:v3.17	bind	9.11.0_p5-r0
Alpine:v3.18	bind	9.11.0_p5-r0
Alpine:v3.19	bind	9.11.0_p5-r0
Alpine:v3.2	bind	9.10.4_p8
Alpine:v3.20	bind	9.11.0_p5-r0
Alpine:v3.21	bind	9.11.0_p5-r0
Alpine:v3.22	bind	9.11.0_p5-r0
Alpine:v3.23	bind	9.11.0_p5-r0
Alpine:v3.24	bind	9.11.0_p5-r0
Alpine:v3.3	bind	9.10.4_p8-r0
Alpine:v3.5	bind	9.10.4_p8-r0
Alpine:v3.6	bind	9.11.0_p5-r0
Alpine:v3.7	bind	9.11.0_p5-r0
Alpine:v3.8	bind	9.11.0_p5-r0
Alpine:v3.9	bind	9.11.0_p5-r0
Chainguard	bind	0
Chainguard	bind-dev	0
Chainguard	bind-dnssec-root	0
Chainguard	bind-dnssec-tools	0
Chainguard	bind-doc	0
Chainguard	bind-libs	0
Chainguard	bind-plugins	0
Chainguard	bind-tools	0
Debian:12	bind9	1:9.10.3.dfsg.P4-12.3
Debian:13	bind9	1:9.10.3.dfsg.P4-12.3
Debian:14	bind9	1:9.10.3.dfsg.P4-12.3
Debian:7	bind9	1:9.8.4.dfsg.P1-6+nmu2+deb7u16
Debian:8	bind9	1:9.9.5.dfsg-9+deb8u11
Red Hat:enterprise_linux:6	bind	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-chroot	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-debuginfo	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-devel	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-libs	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-sdb	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:6	bind-utils	32:9.8.2-0.62.rc1.el6_9.1
Red Hat:enterprise_linux:7	bind	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-chroot	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-debuginfo	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-devel	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-libs	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-libs-lite	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-license	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-lite-devel	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-pkcs11	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-pkcs11-devel	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-pkcs11-libs	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-pkcs11-utils	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-sdb	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-sdb-chroot	32:9.9.4-38.el7_3.3
Red Hat:enterprise_linux:7	bind-utils	32:9.9.4-38.el7_3.3
SUSE:Linux Enterprise Desktop 12 SP1	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Desktop 12 SP2	bind	9.9.9P1-59.1
SUSE:Linux Enterprise High Performance Computing 15-ESPOS	bind	9.16.6-12.32.1
SUSE:Linux Enterprise High Performance Computing 15-ESPOS	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise High Performance Computing 15-LTSS	bind	9.16.6-12.32.1
SUSE:Linux Enterprise High Performance Computing 15-LTSS	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Module for Basesystem 15 SP1	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Module for Basesystem 15 SP1	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Module for Basesystem 15 SP2	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Module for Basesystem 15 SP2	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Module for Development Tools 15 SP2	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Module for Server Applications 15 SP1	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Module for Server Applications 15 SP2	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Point of Sale 11 SP3	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Server 11 SP3-LTSS	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Server 11 SP3-TERADATA	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Server 11 SP4	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Server 12 SP1	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Server 12 SP2	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Server 12-LTSS	bind	9.9.9P1-28.34.1
SUSE:Linux Enterprise Server 15-LTSS	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Server 15-LTSS	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Server for SAP Applications 12	bind	9.9.9P1-28.34.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Server for SAP Applications 15	bind	9.16.6-12.32.1
SUSE:Linux Enterprise Server for SAP Applications 15	sysuser-tools	2.0-4.2.8
SUSE:Linux Enterprise Software Development Kit 11 SP4	bind	9.9.6P1-0.44.1
SUSE:Linux Enterprise Software Development Kit 12 SP1	bind	9.9.9P1-59.1
SUSE:Linux Enterprise Software Development Kit 12 SP2	bind	9.9.9P1-59.1
SUSE:Manager 2.1	bind	9.9.6P1-0.44.1
SUSE:Manager Proxy 2.1	bind	9.9.6P1-0.44.1
SUSE:OpenStack Cloud 5	bind	9.9.6P1-0.44.1
Ubuntu:14.04:LTS	bind9	1:9.9.5.dfsg-3ubuntu0.14
Ubuntu:16.04:LTS	bind9	1:9.10.3.dfsg.P4-8ubuntu1.6
Wolfi	bind	0
Wolfi	bind-dev	0
Wolfi	bind-dnssec-root	0
Wolfi	bind-dnssec-tools	0
Wolfi	bind-doc	0
Wolfi	bind-libs	0
Wolfi	bind-plugins	0
Wolfi	bind-tools	0
openSUSE:Leap 15.1	bind	9.16.6-lp151.11.9.1
openSUSE:Leap 15.1	libuv	1.18.0-lp151.3.3.1
openSUSE:Leap 15.1	sysuser-tools	2.0-lp151.4.3.1
openSUSE:Leap 15.2	bind	9.16.6-lp152.14.3.1
openSUSE:Leap 15.2	libuv	1.18.0-lp152.4.3.1
openSUSE:Leap 15.2	sysuser-tools	2.0-lp152.5.3.1