CVE-2017-3141

Windows service and uninstall paths are not quoted when BIND is installed

7.2 HighPublic exploitFix available

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: High
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.41%Down 2.0 points since Apr 14, 2021

What each source reports

CVE List Score used 7.2

Windows service and uninstall paths are not quoted when BIND is installed

Record: CVE-2017-3141
CVSS 3.0: 7.2 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2017-12282 7.2

Record: EUVD-2017-12282
CVSS 3.0: 7.2 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6j28-2p63-cr4r 7.8

The BIND installer on Windows uses an unquoted service path which can enable a local user to...

Record: GHSA-6j28-2p63-cr4r
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-428
Updated: 2026-11-02

NVD 7.2

Record: CVE-2017-3141
CVSS 3.0: 7.2 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-428
Updated: 2026-11-02

OSVALPINE-CVE-2017-3141 7.8

Record: ALPINE-CVE-2017-3141
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

Record: CVE-2017-3141
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10650-1 No score

bind-9.16.20-1.4 on GA media

These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10650-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bind` Alpine:v3.6	9.2.6 up to 9.11.3-r0	9.11.3-r0
`bind` Alpine:v3.7	9.2.6 up to 9.11.3-r0	9.11.3-r0
`bind` openSUSE:Tumbleweed From an advisory covering 32 CVEs	before 9.16.20-1.4	9.16.20-1.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	BIND 9.10.5 - Unquoted Service Path Privilege Escalation	2017-06-05

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-3141 is a high vulnerability (CVSS 7.2) in Isc Bind, published January 16, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.41%, the 72nd percentile. Fixed in bind 9.11.3-r0.

References

Show 35 moreShow less