NetSight
IP …
medium5.9

CVE-2017-3136

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate.

Impact

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

Affected products

VendorProductAffected versions
IscBind
from 9.8.0 through 9.8.8
from 9.9.0 through 9.9.9
from 9.10.0 through 9.10.4
Versions 9.8.0, 9.9.0, 9.9.3
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
NetappData Ontap Edge
All versions
NetappElement Software
All versions
NetappOncommand Balance
All versions
DebianDebian Linux
Version 8.0

Weakness classification

CWE-617

References