CVE-2017-3140
Fixed in a distro release EPSS 12%CVSS 3.7
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.6 | bind | 9.11.3-r0 |
| Alpine 3.7 | bind | 9.11.3-r0 |
| Arch Linux | bind | 9.11.1.P1-1 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.14 |
| Ubuntu 16.04 LTS | bind9 | 1:9.10.3.dfsg.P4-8ubuntu1.6 |