CVE-2017-3145
Fixed in a distro release EPSS 28%CVSS 7.5
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | bind | 9.11.2_p1-r0 |
| Alpine 3.11 | bind | 9.11.2_p1-r0 |
| Alpine 3.12 | bind | 9.11.2_p1-r0 |
| Alpine 3.13 | bind | 9.11.2_p1-r0 |
| Alpine 3.14 | bind | 9.11.2_p1-r0 |
| Alpine 3.15 | bind | 9.11.2_p1-r0 |
| Alpine 3.16 | bind | 9.11.2_p1-r0 |
| Alpine 3.17 | bind | 9.11.2_p1-r0 |
| Alpine 3.18 | bind | 9.11.2_p1-r0 |
| Alpine 3.19 | bind | 9.11.2_p1-r0 |
| Alpine 3.20 | bind | 9.11.2_p1-r0 |
| Alpine 3.21 | bind | 9.11.2_p1-r0 |
| Alpine 3.22 | bind | 9.11.2_p1-r0 |
| Alpine 3.23 | bind | 9.11.2_p1-r0 |
| Alpine 3.24 | bind | 9.11.2_p1-r0 |
| Alpine 3.4 | bind | 9.10.6_p1-r0 |
| Alpine 3.5 | bind | 9.10.6_p1-r0 |
| Alpine 3.6 | bind | 9.11.2_p1-r0 |
| Alpine 3.7 | bind | 9.11.2_p1-r0 |
| Alpine 3.8 | bind | 9.11.2_p1-r0 |
| Alpine 3.9 | bind | 9.11.2_p1-r0 |
| Chainguard | bind | 0 |
| Chainguard | bind-dev | 0 |
| Chainguard | bind-dnssec-root | 0 |
| Chainguard | bind-dnssec-tools | 0 |
| Chainguard | bind-doc | 0 |
| Chainguard | bind-libs | 0 |
| Chainguard | bind-plugins | 0 |
| Chainguard | bind-tools | 0 |
| Debian 12 | bind9 | 1:9.11.2.P1-1 |
| Debian 13 | bind9 | 1:9.11.2.P1-1 |
| Debian 14 | bind9 | 1:9.11.2.P1-1 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u19 |
| Debian 8 | bind9 | 1:9.9.5.dfsg-9+deb8u15 |
| Debian 9 | bind9 | 1:9.10.3.dfsg.P4-12.3+deb9u4 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.62.rc1.el6_9.5 |
| Red Hat Enterprise Linux 7 | bind | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-chroot | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-debuginfo | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-devel | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-libs | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-libs-lite | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-license | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-lite-devel | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-pkcs11 | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-devel | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-libs | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-pkcs11-utils | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-sdb | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-sdb-chroot | 32:9.9.4-51.el7_4.2 |
| Red Hat Enterprise Linux 7 | bind-utils | 32:9.9.4-51.el7_4.2 |
| Red Hat rhel aus 6.4 | bind | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-chroot | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-devel | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-libs | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-sdb | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.4 | bind-utils | 32:9.8.2-0.17.rc1.el6_4.13 |
| Red Hat rhel aus 6.5 | bind | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-chroot | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-debuginfo | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-devel | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-libs | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-sdb | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.5 | bind-utils | 32:9.8.2-0.23.rc1.el6_5.8 |
| Red Hat rhel aus 6.6 | bind | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-chroot | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-debuginfo | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-devel | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-libs | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-sdb | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 6.6 | bind-utils | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel aus 7.2 | bind | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-debuginfo | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-libs-lite | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-license | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-lite-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-pkcs11 | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-pkcs11-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-pkcs11-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-pkcs11-utils | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-sdb | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-sdb-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel aus 7.2 | bind-utils | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-debuginfo | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-libs-lite | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-license | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-lite-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-pkcs11 | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-pkcs11-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-pkcs11-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-pkcs11-utils | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-sdb | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-sdb-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel e4s 7.2 | bind-utils | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel eus 6.7 | bind | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-chroot | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-debuginfo | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-devel | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-libs | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-sdb | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 6.7 | bind-utils | 32:9.8.2-0.37.rc1.el6_7.12 |
| Red Hat rhel eus 7.3 | bind | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-chroot | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-debuginfo | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-devel | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-libs | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-libs-lite | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-license | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-lite-devel | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-pkcs11 | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-pkcs11-devel | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-pkcs11-libs | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-pkcs11-utils | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-sdb | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-sdb-chroot | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel eus 7.3 | bind-utils | 32:9.9.4-50.el7_3.3 |
| Red Hat rhel tus 6.6 | bind | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-chroot | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-debuginfo | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-devel | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-libs | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-sdb | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 6.6 | bind-utils | 32:9.8.2-0.30.rc1.el6_6.10 |
| Red Hat rhel tus 7.2 | bind | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-debuginfo | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-libs-lite | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-license | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-lite-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-pkcs11 | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-pkcs11-devel | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-pkcs11-libs | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-pkcs11-utils | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-sdb | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-sdb-chroot | 32:9.9.4-29.el7_2.8 |
| Red Hat rhel tus 7.2 | bind-utils | 32:9.9.4-29.el7_2.8 |
| SUSE Linux Enterprise Desktop 12 SP2 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server 12 SP2 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | bind | 9.9.6P1-0.51.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | bind | 9.9.9P1-63.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | bind | 9.9.9P1-63.7.1 |
| SUSE OpenStack Cloud 6 | bind | 9.9.9P1-63.7.1 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.17 |
| Ubuntu 16.04 LTS | bind9 | 1:9.10.3.dfsg.P4-8ubuntu1.10 |
| Wolfi | bind | 0 |
| Wolfi | bind-dev | 0 |
| Wolfi | bind-dnssec-root | 0 |
| Wolfi | bind-dnssec-tools | 0 |
| Wolfi | bind-doc | 0 |
| Wolfi | bind-libs | 0 |
| Wolfi | bind-plugins | 0 |
| Wolfi | bind-tools | 0 |
| openSUSE Tumbleweed | bind | 9.16.20-1.4 |