{"id":"CVE-2017-3138","aliases":["ALPINE-CVE-2017-3138","BELL-CVE-2017-3138","DEBIAN-CVE-2017-3138","DLA-957-1","DSA-3854-1","EUVD-2017-12279","GHSA-q858-q2j2-9jg4","MGASA-2017-0478","SUSE-SU-2017:0998-1","SUSE-SU-2017:0999-1","SUSE-SU-2017:1000-1","UBUNTU-CVE-2017-3138","USN-3259-1"],"status":"published","title":"named exits with a REQUIRE assertion failure if it receives a null command string on its control channel","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.05503,"percentile":0.92839,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2017-04-12T00:00:00Z","modified":"2026-10-24T10:30:43Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.2","package":"bind","fixed_in":["9.10.4_p8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"bind","fixed_in":["9.10.4_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"bind","fixed_in":["9.10.4_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"bind","fixed_in":["9.11.0_p5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12.3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12.3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-12.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"bind9","fixed_in":["1:9.9.5.dfsg-3ubuntu0.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-8ubuntu1.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.4_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.0_p5-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12.3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12.3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-12.3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.8.4.dfsg.P1-6+nmu2+deb7u16"}]}],"versions":["1:9.8.4.dfsg.P1-6+nmu2","1:9.8.4.dfsg.P1-6+nmu2+deb7u1","1:9.8.4.dfsg.P1-6+nmu2+deb7u10","1:9.8.4.dfsg.P1-6+nmu2+deb7u11","1:9.8.4.dfsg.P1-6+nmu2+deb7u12","1:9.8.4.dfsg.P1-6+nmu2+deb7u13","1:9.8.4.dfsg.P1-6+nmu2+deb7u14","1:9.8.4.dfsg.P1-6+nmu2+deb7u15","1:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+1","1:9.8.4.dfsg.P1-6+nmu2+deb7u2","1:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+1","1:9.8.4.dfsg.P1-6+nmu2+deb7u3","1:9.8.4.dfsg.P1-6+nmu2+deb7u4","1:9.8.4.dfsg.P1-6+nmu2+deb7u5","1:9.8.4.dfsg.P1-6+nmu2+deb7u6","1:9.8.4.dfsg.P1-6+nmu2+deb7u7","1:9.8.4.dfsg.P1-6+nmu2+deb7u8","1:9.8.4.dfsg.P1-6+nmu2+deb7u9"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-9+deb8u11"}]}],"versions":["1:9.9.5.dfsg-9","1:9.9.5.dfsg-9+deb8u1","1:9.9.5.dfsg-9+deb8u10","1:9.9.5.dfsg-9+deb8u2","1:9.9.5.dfsg-9+deb8u3","1:9.9.5.dfsg-9+deb8u4","1:9.9.5.dfsg-9+deb8u5","1:9.9.5.dfsg-9+deb8u6","1:9.9.5.dfsg-9+deb8u7","1:9.9.5.dfsg-9+deb8u8","1:9.9.5.dfsg-9+deb8u8+kbsd8u1~reallyis+deb8u7","1:9.9.5.dfsg-9+deb8u9"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.5.P3-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-59.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-28.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.9P1-28.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.6P1-0.44.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.14"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.6"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.14"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.6"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"isc","product":"bind"},{"vendor":"isc","product":"bind 9"},{"vendor":"netapp","product":"data_ontap_edge"},{"vendor":"netapp","product":"element_software"},{"vendor":"netapp","product":"oncommand_balance"}],"references":[{"url":"http://www.securitytracker.com/id/1038260","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/97657","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201708-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180802-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3854","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kb.isc.org/docs/aa-01471","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3138"},{"url":"https://github.com/advisories/GHSA-q858-q2j2-9jg4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-3138","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-3138","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-3138","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0478.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20107","tags":["report"]},{"url":"https://kb.isc.org/article/AA-01439","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01440","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01441","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01442","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01453","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01465","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01466","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01471","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01503","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01504","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01447","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01455","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01484","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01508","tags":["web"]},{"url":"https://ftp.isc.org/isc/bind9/9.10.5-P3/RELEASE-NOTES-bind-9.10.5-P3.html","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3172-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3201-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3259-1/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170998-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1020983","tags":["report"]},{"url":"https://bugzilla.suse.com/1033466","tags":["report"]},{"url":"https://bugzilla.suse.com/1033467","tags":["report"]},{"url":"https://bugzilla.suse.com/1033468","tags":["report"]},{"url":"https://bugzilla.suse.com/987866","tags":["report"]},{"url":"https://bugzilla.suse.com/989528","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3138","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170999-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171000-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-3138","tags":["report"]},{"url":"https://kb.isc.org/article/AA-01471/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3259-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3137","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-3138","title":"named exits with a REQUIRE assertion failure if it receives a null command string on its control channel","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T22:40:54.323Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12279","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T22:40:54Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:00.660655Z"}],"ghsa":[{"id":"GHSA-q858-q2j2-9jg4","title":"named contains a feature which allows operators to issue commands to a running server by...","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2022-05-13T01:36:47Z","modified":"2023-02-01T05:08:45Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:50:51.059157Z"}],"nvd":[{"id":"CVE-2017-3138","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:29:00.407Z","modified":"2026-06-17T01:17:35.85Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:04:19.545286Z"}],"osv":[{"id":"ALPINE-CVE-2017-3138","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:29:00.407Z","modified":"2026-06-15T18:18:06.775152602Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-3138","title":"CVE-2017-3138 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:52.460445Z","modified":"2026-01-26T09:45:57.089096Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-3138","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:29:00.407Z","modified":"2026-10-24T10:30:43.937971147Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-3138","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2019-01-16T20:29:00.407Z","modified":"2026-09-01T20:03:47.966144319Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-3138","description":"named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-\u003e9.9.9-P7, 9.9.10b1-\u003e9.9.10rc2, 9.10.4-\u003e9.10.4-P7, 9.10.5b1-\u003e9.10.5rc2, 9.11.0-\u003e9.11.0-P4, 9.11.1b1-\u003e9.11.1rc2, 9.9.9-S1-\u003e9.9.9-S9.","status":"published","published":"2017-04-12T00:00:00Z","modified":"2026-04-22T11:24:11.951627Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-957-1","title":"bind9 - security update","status":"published","published":"2017-05-28T00:00:00Z","modified":"2026-03-09T02:10:04.157961Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3854-1","title":"bind9 - security update","status":"published","published":"2017-05-14T00:00:00Z","modified":"2026-03-09T01:18:33.001179Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0478","title":"Updated bind packages fix security vulnerability","description":"It was discovered that Bind incorrectly handled certain malformed responses\nto an ANY query. A remote attacker could possibly use this issue to cause\nBind to crash, resulting in a denial of service (CVE-2016-9131).\n\nIt was discovered that Bind incorrectly handled certain malformed responses\nto an ANY query. A remote attacker could possibly use this issue to cause\nBind to crash, resulting in a denial of service (CVE-2016-9147).\n\nIt was discovered that Bind incorrectly handled certain malformed DS record\nresponses. A remote attacker could possibly use this issue to cause Bind to\ncrash, resulting in a denial of service (CVE-2016-9444).\n\nAn error in handling certain queries can cause an assertion failure when a\nserver is using the nxdomain-redirect feature to cover a zone for which it is\nalso providing authoritative service.  A vulnerable server could be\nintentionally stopped by an attacker if it was using a configuration that met\nthe criteria for the vulnerability and if the attacker could cause it to accept\na query that possessed the required attributes (CVE-2016-9778).\n\nIt was discovered that Bind incorrectly handled rewriting certain query\nresponses when using both DNS64 and RPZ. A remote attacker could possibly\nuse this issue to cause Bind to crash, resulting in a denial of service\n(CVE-2017-3135).\n\nOleg Gorokhov discovered that in some situations, Bind did not properly\nhandle DNS64 queries. An attacker could use this to cause a denial\nof service (CVE-2017-3136).\n\nIt was discovered that the resolver in Bind made incorrect\nassumptions about ordering when processing responses containing\na CNAME or DNAME. An attacker could use this cause a denial of\nservice (CVE-2017-3137).\n\nMike Lalumiere discovered that in some situations, Bind did\nnot properly handle invalid operations requested via its control\nchannel. An attacker with access to the control channel could cause\na denial of service (CVE-2017-3138).\n\nClément Berthaux discovered that Bind did not correctly check TSIG\nauthentication for zone transfer requests. An attacker could use this\nto improperly transfer entire zones (CVE-2017-3142).\n\nClément Berthaux discovered that Bind did not correctly check TSIG\nauthentication for zone update requests. An attacker could use this\nto improperly perform zone updates (CVE-2017-3143).\n","status":"published","published":"2017-12-31T12:00:06Z","modified":"2026-04-16T06:24:27.416486315Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:0998-1","title":"Security update for bind","description":"\nThis update for bind fixes the following issues:\n\nCVE-2017-3137 (bsc#1033467):\nMistaken assumptions about the ordering of records in the answer\nsection of a response containing CNAME or DNAME resource records\ncould have been exploited to cause a denial of service of a bind\nserver performing recursion.\n\nCVE-2017-3136 (bsc#1033466):\nAn attacker could have constructed a query that would cause a denial\nof service of servers configured to use DNS64.\n\nCVE-2017-3138 (bsc#1033468):\nAn attacker with access to the BIND control channel could have caused\nthe server to stop by triggering an assertion failure.\n\nCVE-2016-6170 (bsc#987866):\nPrimary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response.\nIXFR servers could have caused a denial of service of IXFR clients via a large IXFR response.\nRemote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message.\n\nCVE-2016-2775 (bsc#989528):\nWhen lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service \n(daemon crash) via a long request that uses the lightweight resolver protocol.\n\nOne additional non-security bug was fixed:\n\nThe default umask was changed to 077. (bsc#1020983)\n\n","status":"published","published":"2017-04-13T00:33:44Z","modified":"2026-02-04T03:47:27.061528Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0999-1","title":"Security update for bind","description":"\nThis update for bind fixes the following issues:\n\nCVE-2017-3137 (bsc#1033467):\nMistaken assumptions about the ordering of records in the answer\nsection of a response containing CNAME or DNAME resource records\ncould have been exploited to cause a denial of service of a bind\nserver performing recursion.\n\nCVE-2017-3136 (bsc#1033466):\nAn attacker could have constructed a query that would cause a denial\nof service of servers configured to use DNS64.\n\nCVE-2017-3138 (bsc#1033468):\nAn attacker with access to the BIND control channel could have caused\nthe server to stop by triggering an assertion failure.\n\nCVE-2016-6170 (bsc#987866):\nPrimary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response.\nIXFR servers could have caused a denial of service of IXFR clients via a large IXFR response.\nRemote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message.\n\nCVE-2016-2775 (bsc#989528):\nWhen lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service \n(daemon crash) via a long request that uses the lightweight resolver protocol.\n\n","status":"published","published":"2017-04-13T00:32:22Z","modified":"2026-02-04T04:29:43.366413Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1000-1","title":"Security update for bind","description":"\nThis update for bind fixes the following security issues:\n\nCVE-2017-3137 (bsc#1033467):\nMistaken assumptions about the ordering of records in the answer\nsection of a response containing CNAME or DNAME resource records\ncould have been exploited to cause a denial of service of a bind\nserver performing recursion.\n\nCVE-2017-3136 (bsc#1033466):\nAn attacker could have constructed a query that would cause a denial\nof service of servers configured to use DNS64.\n\nCVE-2017-3138 (bsc#1033468):\nAn attacker with access to the BIND control channel could have caused\nthe server to stop by triggering an assertion failure.\n\nCVE-2016-6170 (bsc#987866):\nPrimary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response.\nIXFR servers could have caused a denial of service of IXFR clients via a large IXFR response.\nRemote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message.\n\nCVE-2016-2775 (bsc#989528):\nWhen lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service\n(daemon crash) via a long request that uses the lightweight resolver protocol.\n\n","status":"published","published":"2017-04-13T00:37:13Z","modified":"2026-02-04T04:30:23.275004Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3259-1","title":"bind9 vulnerabilities","description":"It was discovered that the resolver in Bind made incorrect\nassumptions about ordering when processing responses containing\na CNAME or DNAME. An attacker could use this cause a denial of\nservice. (CVE-2017-3137)\n\nOleg Gorokhov discovered that in some situations, Bind did not properly\nhandle DNS64 queries. An attacker could use this to cause a denial\nof service. (CVE-2017-3136)\n\nMike Lalumiere discovered that in some situations, Bind did\nnot properly handle invalid operations requested via its control\nchannel. An attacker with access to the control channel could cause\na denial of service. (CVE-2017-3138)\n","status":"published","published":"2017-04-17T18:21:01Z","modified":"2026-04-22T09:33:48.745613Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}