{"id":"CVE-2017-3135","aliases":["ALPINE-CVE-2017-3135","DEBIAN-CVE-2017-3135","DLA-843-1","DSA-3795-1","EUVD-2017-12276","GHSA-369c-w4jq-mxgx","MGASA-2017-0478","RHSA-2017:0276","SUSE-SU-2017:0594-1","SUSE-SU-2017:0595-1","SUSE-SU-2017:0596-1","UBUNTU-CVE-2017-3135","USN-3201-1","openSUSE-SU-2024:10650-1"],"status":"published","title":"Combination of DNS64 and RPZ Can Lead to Crash","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.17108,"percentile":0.97101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2017-02-09T00:00:00Z","modified":"2026-10-26T10:45:05Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"bind","fixed_in":["9.10.4_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"bind","fixed_in":["9.10.4_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"bind","fixed_in":["9.10.4_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"bind","fixed_in":["9.10.4_p6-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"bind9","fixed_in":["1:9.8.4.dfsg.P1-6+nmu2+deb7u15"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"bind9","fixed_in":["1:9.9.5.dfsg-9+deb8u10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-debuginfo","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-libs-lite","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-license","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-lite-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-sdb","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-sdb-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-debuginfo","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-libs-lite","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-license","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-lite-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-sdb","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-sdb-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-debuginfo","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-libs-lite","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-license","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-lite-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-sdb","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-sdb-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-debuginfo","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-libs-lite","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-license","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-libs","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-utils","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-lite-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-devel","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-sdb","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-sdb-chroot","fixed_in":["32:9.9.4-38.el7_3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"bind","fixed_in":["9.9.9P1-28.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"bind","fixed_in":["9.9.9P1-28.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 5","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager 2.1","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 2.1","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"bind","fixed_in":["9.9.6P1-0.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"bind","fixed_in":["9.9.9P1-56.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"bind9","fixed_in":["1:9.9.5.dfsg-3ubuntu0.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-8ubuntu1.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.4.dfsg.P1-6+nmu2+deb7u15"}]}],"versions":["1:9.8.4.dfsg.P1-6+nmu2","1:9.8.4.dfsg.P1-6+nmu2+deb7u1","1:9.8.4.dfsg.P1-6+nmu2+deb7u10","1:9.8.4.dfsg.P1-6+nmu2+deb7u11","1:9.8.4.dfsg.P1-6+nmu2+deb7u12","1:9.8.4.dfsg.P1-6+nmu2+deb7u13","1:9.8.4.dfsg.P1-6+nmu2+deb7u14","1:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+1","1:9.8.4.dfsg.P1-6+nmu2+deb7u2","1:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+1","1:9.8.4.dfsg.P1-6+nmu2+deb7u3","1:9.8.4.dfsg.P1-6+nmu2+deb7u4","1:9.8.4.dfsg.P1-6+nmu2+deb7u5","1:9.8.4.dfsg.P1-6+nmu2+deb7u6","1:9.8.4.dfsg.P1-6+nmu2+deb7u7","1:9.8.4.dfsg.P1-6+nmu2+deb7u8","1:9.8.4.dfsg.P1-6+nmu2+deb7u9"]},{"source":"osv","ecosystem":"Debian:8","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-9+deb8u10"}]}],"versions":["1:9.9.5.dfsg-9","1:9.9.5.dfsg-9+deb8u1","1:9.9.5.dfsg-9+deb8u2","1:9.9.5.dfsg-9+deb8u3","1:9.9.5.dfsg-9+deb8u4","1:9.9.5.dfsg-9+deb8u5","1:9.9.5.dfsg-9+deb8u6","1:9.9.5.dfsg-9+deb8u7","1:9.9.5.dfsg-9+deb8u8","1:9.9.5.dfsg-9+deb8u8+kbsd8u1~reallyis+deb8u7","1:9.9.5.dfsg-9+deb8u9"]},{"source":"osv","ecosystem":"Mageia:5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.5.P3-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.9.4-38.el7_3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-28.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-28.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-56.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.13"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.5"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.13"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.5"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.20-1.4"}]}],"bundled":32}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"isc","product":"bind"},{"vendor":"isc","product":"bind 9"},{"vendor":"netapp","product":"data_ontap_edge"},{"vendor":"netapp","product":"element_software_management_node"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://security.gentoo.org/glsa/201708-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0276.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180926-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03747en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/96150","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1037801","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3795","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kb.isc.org/docs/aa-01453","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3135","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-369c-w4jq-mxgx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-3135","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-3135","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0478.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20107","tags":["report"]},{"url":"https://kb.isc.org/article/AA-01439","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01440","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01441","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01442","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01453","tags":["web","article","report"]},{"url":"https://kb.isc.org/article/AA-01465","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01466","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01471","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01503","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01504","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01447","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01455","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01484","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01508","tags":["web"]},{"url":"https://ftp.isc.org/isc/bind9/9.10.5-P3/RELEASE-NOTES-bind-9.10.5-P3.html","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3172-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3201-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3259-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0276","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420193","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0276.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3135","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170594-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1024130","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3135","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170595-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170596-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-3135","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3201-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25218","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-3135","title":"Combination of DNS64 and RPZ Can Lead to Crash","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T17:53:49.488Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12276","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T17:53:49Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:37.743963Z"}],"ghsa":[{"id":"GHSA-369c-w4jq-mxgx","title":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing...","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2022-05-13T01:36:47Z","modified":"2023-02-01T05:08:40Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:50:49.403077Z"}],"nvd":[{"id":"CVE-2017-3135","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:29:00.283Z","modified":"2026-06-17T01:17:35.27Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:19.545286Z"}],"osv":[{"id":"ALPINE-CVE-2017-3135","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:29:00.283Z","modified":"2026-06-15T18:24:34.360833172Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-3135","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:29:00.283Z","modified":"2026-10-26T10:45:05.380914462Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-3135","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2019-01-16T20:29:00.283Z","modified":"2026-09-01T20:03:47.890553809Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2017:0276","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-16T00:05:45Z","modified":"2026-07-01T10:01:42Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-3135","description":"Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -\u003e 9.9.9-S7, 9.9.3 -\u003e 9.9.9-P5, 9.9.10b1, 9.10.0 -\u003e 9.10.4-P5, 9.10.5b1, 9.11.0 -\u003e 9.11.0-P2, 9.11.1b1.","status":"published","published":"2017-02-09T00:00:00Z","modified":"2026-04-22T11:23:42.5432Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-843-1","title":"bind9 - security update","status":"published","published":"2017-02-28T00:00:00Z","modified":"2026-03-09T02:10:41.064679Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3795-1","title":"bind9 - security update","status":"published","published":"2017-02-26T00:00:00Z","modified":"2026-03-09T02:10:30.810356Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0478","title":"Updated bind packages fix security vulnerability","description":"It was discovered that Bind incorrectly handled certain malformed responses\nto an ANY query. A remote attacker could possibly use this issue to cause\nBind to crash, resulting in a denial of service (CVE-2016-9131).\n\nIt was discovered that Bind incorrectly handled certain malformed responses\nto an ANY query. A remote attacker could possibly use this issue to cause\nBind to crash, resulting in a denial of service (CVE-2016-9147).\n\nIt was discovered that Bind incorrectly handled certain malformed DS record\nresponses. A remote attacker could possibly use this issue to cause Bind to\ncrash, resulting in a denial of service (CVE-2016-9444).\n\nAn error in handling certain queries can cause an assertion failure when a\nserver is using the nxdomain-redirect feature to cover a zone for which it is\nalso providing authoritative service.  A vulnerable server could be\nintentionally stopped by an attacker if it was using a configuration that met\nthe criteria for the vulnerability and if the attacker could cause it to accept\na query that possessed the required attributes (CVE-2016-9778).\n\nIt was discovered that Bind incorrectly handled rewriting certain query\nresponses when using both DNS64 and RPZ. A remote attacker could possibly\nuse this issue to cause Bind to crash, resulting in a denial of service\n(CVE-2017-3135).\n\nOleg Gorokhov discovered that in some situations, Bind did not properly\nhandle DNS64 queries. An attacker could use this to cause a denial\nof service (CVE-2017-3136).\n\nIt was discovered that the resolver in Bind made incorrect\nassumptions about ordering when processing responses containing\na CNAME or DNAME. An attacker could use this cause a denial of\nservice (CVE-2017-3137).\n\nMike Lalumiere discovered that in some situations, Bind did\nnot properly handle invalid operations requested via its control\nchannel. An attacker with access to the control channel could cause\na denial of service (CVE-2017-3138).\n\nClément Berthaux discovered that Bind did not correctly check TSIG\nauthentication for zone transfer requests. An attacker could use this\nto improperly transfer entire zones (CVE-2017-3142).\n\nClément Berthaux discovered that Bind did not correctly check TSIG\nauthentication for zone update requests. An attacker could use this\nto improperly perform zone updates (CVE-2017-3143).\n","status":"published","published":"2017-12-31T12:00:06Z","modified":"2026-04-16T06:24:27.416486315Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10650-1","title":"bind-9.16.20-1.4 on GA media","description":"These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:52:09.525836Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:0594-1","title":"Security update for bind","description":"\nThis update for bind fixes the following issues:\n\n- Fixed a possible denial of service vulnerability (affected only\n  configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130)\n","status":"published","published":"2017-03-02T14:24:48Z","modified":"2026-02-04T04:37:20.231999Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0595-1","title":"Security update for bind","description":"\nThis update for bind fixes the following issues:\n\n- Fixed a possible denial of service vulnerability (affected only\n  configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130)\n","status":"published","published":"2017-03-02T14:27:24Z","modified":"2026-02-04T03:17:04.262897Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0596-1","title":"Security update for bind","description":"\nThis update for bind fixes the following issues:\n\n- Fixed a possible denial of service vulnerability (affected only\n  configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130)\n","status":"published","published":"2017-03-02T14:28:58Z","modified":"2026-02-04T02:15:03.819237Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3201-1","title":"bind9 vulnerabilities","description":"It was discovered that Bind incorrectly handled rewriting certain query\nresponses when using both DNS64 and RPZ. A remote attacker could possibly\nuse this issue to cause Bind to crash, resulting in a denial of service.\n","status":"published","published":"2017-02-16T18:38:58Z","modified":"2026-04-22T09:32:15.220743Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}