NetSight
IP …
high7.5

CVE-2017-3135

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIS…

Impact

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

Affected products

VendorProductAffected versions
IscBind
Versions 9.9.3, 9.9.8, 9.9.9, 9.9.10, 9.10.0, 9.10.4
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6
RedhatEnterprise Linux Workstation
Version 7.0
NetappData Ontap Edge
All versions
NetappElement Software Management Node
All versions
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-476

References