NetSight
IP …
high7.5

CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in …

Impact

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.

Affected products

VendorProductAffected versions
IscBind
Versions 9.9.9, 9.9.10, 9.10.4, 9.10.5, 9.11.0, 9.11.1
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.2, 6.4, 6.5, 6.6, 7.2, 7.3
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.5, 6.6, 7.2, 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
NetappData Ontap Edge
All versions
NetappElement Software
All versions
NetappOncommand Balance
All versions
DebianDebian Linux
Version 8.0

Weakness classification

CWE-617

References