CVE-2017-3136 An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

🗓️ 16 Jan 2019 20:00:00Reported by iscType

An error in handling synthesized records causes assertion failure for DNS64 with "break-dnssec yes;

Reporter	Title	Published	Views	Family All 141
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1	12 Apr 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.4.P8-alt1	12 Apr 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138)	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple packages as used in IBM Security QRadar Packet Capture are vulnerable to various security issues.	28 Oct 202017:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bind affect PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSource ISC Bind affects IBM Netezza Host Management	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
Amazon	Important: bind	27 Apr 201700:00	–	amazon

[
  {
    "product": "BIND 9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8"
      }
    ]
  }
]

Source	Link
h20566	www.h20566.www2.hpe.com/hpsc/doc/public/display
access	www.access.redhat.com/errata/RHSA-2017:1095
access	www.access.redhat.com/errata/RHSA-2017:1105
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
kb	www.kb.isc.org/docs/aa-01465
security	www.security.netapp.com/advisory/ntap-20180802-0002/
debian	www.debian.org/security/2017/dsa-3854
securitytracker	www.securitytracker.com/id/1038259
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
securityfocus	www.securityfocus.com/bid/97653

20 Oct 2020 11:06Current

6.7Medium risk

Vulners AI Score6.7

CVSS 35.9

EPSS0.16242