Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.
References
| Link | Resource |
|---|---|
| https://kb.isc.org/docs/aa-01466 | Vendor Advisory |
| https://www.debian.org/security/2017/dsa-3854 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20180802-0002/ | Third Party Advisory |
| https://security.gentoo.org/glsa/201708-01 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1583 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1582 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1105 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1095 | Third Party Advisory |
| http://www.securitytracker.com/id/1040195 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038258 | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/97651 | Third Party Advisory VDB Entry |
Advertisement
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2019-01-16 12:29
Updated : 2019-10-09 16:27
NVD link : CVE-2017-3137
Mitre link : CVE-2017-3137
JSON object : View
CWE
CWE-617
Reachable Assertion
Advertisement
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_server_tus
- enterprise_linux_server_eus
- enterprise_linux_server
netapp
- data_ontap_edge
- element_software
- oncommand_balance
debian
- debian_linux
isc
- bind