CVE-2017-3135: fallo de gravedad alta en ISC BIND 9
Combination of DNS64 and RPZ Can Lead to Crash
Publicada el · Actualizada el
26Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 17%
probabilidad de explotación
17%top 3% de las CVE
explotación observada
noninguna fuente lo reporta
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
ISC · BIND 9CVEs relacionadas — ISC BIND 9
En el mismo producto, de las más peligrosas a las menos.
CVE-2018-5740HIGHA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedEPSS 59.6%CVE-2022-3736HIGHnamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queriesEPSS 48.7%CVE-2017-3145HIGHImproper fetch cleanup sequencing in the resolver can cause named to crashEPSS 27.9%CVE-2022-3488HIGHnamed may terminate unexpectedly when processing ECS options in repeated responses to iterative queriesEPSS 19.2%CVE-2024-12705HIGHDNS-over-HTTPS implementation suffers from multiple issues under heavy query loadEPSS 18.4%CVE-2017-3143HIGHAn error in TSIG authentication can permit unauthorized dynamic updatesEPSS 18.3%
Referencias
http://rhn.redhat.com/errata/RHSA-2017-0276.htmlhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_ushttps://kb.isc.org/docs/aa-01453https://security.gentoo.org/glsa/201708-01https://security.netapp.com/advisory/ntap-20180926-0005/https://www.debian.org/security/2017/dsa-3795http://www.securityfocus.com/bid/96150http://www.securitytracker.com/id/1037801