CVE-2017-3137 A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

🗓️ 16 Jan 2019 20:00:00Reported by iscType

A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME. Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to an assertion failure

Reporter	Title	Published	Views	Family All 144
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1	12 Apr 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.4.P8-alt1	12 Apr 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138)	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple packages as used in IBM Security QRadar Packet Capture are vulnerable to various security issues.	28 Oct 202017:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSource ISC Bind affects IBM Netezza Host Management	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
ATTACKERKB	Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858	30 Oct 201900:00	–	attackerkb
Amazon	Important: bind	27 Apr 201700:00	–	amazon

[
  {
    "product": "BIND 9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2017:1095
access	www.access.redhat.com/errata/RHSA-2017:1582
access	www.access.redhat.com/errata/RHSA-2017:1105
securityfocus	www.securityfocus.com/bid/97651
securitytracker	www.securitytracker.com/id/1038258
security	www.security.netapp.com/advisory/ntap-20180802-0002/
debian	www.debian.org/security/2017/dsa-3854
access	www.access.redhat.com/errata/RHSA-2017:1583
securitytracker	www.securitytracker.com/id/1040195
kb	www.kb.isc.org/docs/aa-01466

17 Jan 2019 10:57Current

7.1High risk

Vulners AI Score7.1

CVSS 37.5

EPSS0.28496