NetSight
IP …
high7.5

CVE-2017-3145

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an ass…

Impact

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.

Affected products

VendorProductAffected versions
IscBind
from 9.4.0 through 9.8.8
from 9.9.0 through 9.9.11
from 9.10.0 through 9.10.6
from 9.11.0 through 9.11.2
Versions 9.9.3, 9.9.11
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5, 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.2, 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 7.0, 8.0, 9.0
NetappData Ontap Edge
All versions
JuniperJunos
Versions 12.1x46-d76, 12.3x48-d70, 15.1x49-d140, 17.4r2, 18.1r2, 18.2r1

Weakness classification

CWE-416

References