CVE-2017-3137

Fixed in a distro release EPSS 9%CVSS 7.5

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.

Published 2019-01-16 · CVE record · OSV

Products: ISC BIND 9

Distro releases

Release	Package	Fixed in
Alpine 3.10	bind	9.11.0_p5-r0
Alpine 3.11	bind	9.11.0_p5-r0
Alpine 3.12	bind	9.11.0_p5-r0
Alpine 3.13	bind	9.11.0_p5-r0
Alpine 3.14	bind	9.11.0_p5-r0
Alpine 3.15	bind	9.11.0_p5-r0
Alpine 3.16	bind	9.11.0_p5-r0
Alpine 3.17	bind	9.11.0_p5-r0
Alpine 3.18	bind	9.11.0_p5-r0
Alpine 3.19	bind	9.11.0_p5-r0
Alpine 3.2	bind	9.10.4_p8
Alpine 3.20	bind	9.11.0_p5-r0
Alpine 3.21	bind	9.11.0_p5-r0
Alpine 3.22	bind	9.11.0_p5-r0
Alpine 3.23	bind	9.11.0_p5-r0
Alpine 3.24	bind	9.11.0_p5-r0
Alpine 3.3	bind	9.10.4_p8-r0
Alpine 3.5	bind	9.10.4_p8-r0
Alpine 3.6	bind	9.11.0_p5-r0
Alpine 3.7	bind	9.11.0_p5-r0
Alpine 3.8	bind	9.11.0_p5-r0
Alpine 3.9	bind	9.11.0_p5-r0
Arch Linux	bind	9.11.1-1
Chainguard	bind	0
Chainguard	bind-dev	0
Chainguard	bind-dnssec-root	0
Chainguard	bind-dnssec-tools	0
Chainguard	bind-doc	0
Chainguard	bind-libs	0
Chainguard	bind-plugins	0
Chainguard	bind-tools	0
Debian 12	bind9	1:9.10.3.dfsg.P4-12.3
Debian 13	bind9	1:9.10.3.dfsg.P4-12.3
Debian 14	bind9	1:9.10.3.dfsg.P4-12.3
Debian 7	bind9	1:9.8.4.dfsg.P1-6+nmu2+deb7u16
Debian 8	bind9	1:9.9.5.dfsg-9+deb8u11
Red Hat Enterprise Linux 6	bind	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-chroot	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-debuginfo	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-devel	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-libs	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-sdb	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 6	bind-utils	32:9.8.2-0.62.rc1.el6_9.1
Red Hat Enterprise Linux 7	bind	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-chroot	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-debuginfo	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-devel	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-libs	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-libs-lite	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-license	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-lite-devel	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-pkcs11	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-pkcs11-devel	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-pkcs11-libs	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-pkcs11-utils	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-sdb	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-sdb-chroot	32:9.9.4-38.el7_3.3
Red Hat Enterprise Linux 7	bind-utils	32:9.9.4-38.el7_3.3
Red Hat rhel aus 6.4	bind	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-chroot	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-debuginfo	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-devel	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-libs	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-sdb	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.4	bind-utils	32:9.8.2-0.17.rc1.el6_4.12
Red Hat rhel aus 6.5	bind	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-chroot	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-debuginfo	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-devel	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-libs	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-sdb	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.5	bind-utils	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel aus 6.6	bind	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-chroot	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-debuginfo	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-devel	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-libs	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-sdb	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel aus 6.6	bind-utils	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel eus 6.7	bind	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-chroot	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-debuginfo	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-devel	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-libs	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-sdb	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 6.7	bind-utils	32:9.8.2-0.37.rc1.el6_7.11
Red Hat rhel eus 7.2	bind	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-chroot	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-debuginfo	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-devel	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-libs	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-libs-lite	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-license	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-lite-devel	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-pkcs11	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-pkcs11-devel	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-pkcs11-libs	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-pkcs11-utils	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-sdb	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-sdb-chroot	32:9.9.4-29.el7_2.6
Red Hat rhel eus 7.2	bind-utils	32:9.9.4-29.el7_2.6
Red Hat rhel mission critical 6.2	bind	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-chroot	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-debuginfo	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-devel	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-libs	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-sdb	32:9.7.3-8.P3.el6_2.9
Red Hat rhel mission critical 6.2	bind-utils	32:9.7.3-8.P3.el6_2.9
Red Hat rhel tus 6.5	bind	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-chroot	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-debuginfo	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-devel	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-libs	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-sdb	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.5	bind-utils	32:9.8.2-0.23.rc1.el6_5.7
Red Hat rhel tus 6.6	bind	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-chroot	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-debuginfo	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-devel	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-libs	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-sdb	32:9.8.2-0.30.rc1.el6_6.9
Red Hat rhel tus 6.6	bind-utils	32:9.8.2-0.30.rc1.el6_6.9
SUSE Linux Enterprise Desktop 12 SP1	bind	9.9.9P1-59.1
SUSE Linux Enterprise Desktop 12 SP2	bind	9.9.9P1-59.1
SUSE Linux Enterprise Point of Sale 11 SP3	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Point of Sale 11 SP3	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Server 11 SP3-LTSS	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Server 11 SP3-LTSS	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Server 11 SP3-TERADATA	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Server 11 SP3-TERADATA	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Server 11 SP4	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Server 11 SP4	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Server 12 SP1	bind	9.9.9P1-59.1
SUSE Linux Enterprise Server 12 SP2	bind	9.9.9P1-59.1
SUSE Linux Enterprise Server 12-LTSS	bind	9.9.9P1-28.34.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	bind	9.9.9P1-59.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Server for SAP Applications 12	bind	9.9.9P1-28.34.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1	bind	9.9.9P1-59.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2	bind	9.9.9P1-59.1
SUSE Linux Enterprise Software Development Kit 11 SP4	bind	9.9.6P1-0.47.1
SUSE Linux Enterprise Software Development Kit 11 SP4	bind	9.9.6P1-0.44.1
SUSE Linux Enterprise Software Development Kit 12 SP1	bind	9.9.9P1-59.1
SUSE Linux Enterprise Software Development Kit 12 SP2	bind	9.9.9P1-59.1
SUSE Manager 2.1	bind	9.9.6P1-0.44.1
SUSE Manager 2.1	bind	9.9.6P1-0.47.1
SUSE Manager Proxy 2.1	bind	9.9.6P1-0.47.1
SUSE Manager Proxy 2.1	bind	9.9.6P1-0.44.1
SUSE OpenStack Cloud 5	bind	9.9.6P1-0.47.1
SUSE OpenStack Cloud 5	bind	9.9.6P1-0.44.1
Ubuntu 14.04 LTS	bind9	1:9.9.5.dfsg-3ubuntu0.14
Ubuntu 16.04 LTS	bind9	1:9.10.3.dfsg.P4-8ubuntu1.6
Wolfi	bind	0
Wolfi	bind-dev	0
Wolfi	bind-dnssec-root	0
Wolfi	bind-dnssec-tools	0
Wolfi	bind-doc	0
Wolfi	bind-libs	0
Wolfi	bind-plugins	0
Wolfi	bind-tools	0