CVE-2017-3145 Improper fetch cleanup sequencing in the resolver can cause named to crash

🗓️ 16 Jan 2019 20:00:00Reported by iscType

Improper fetch cleanup sequencing in BIND causes named to cras

Reporter	Title	Published	Views	Family All 142
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt1	26 Aug 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.2.P1-alt1	17 Jan 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2017-3145	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in bind affects PowerKVM	18 Jun 201801:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in bind (CVE-2017-3145)	10 Sep 201819:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Management Module II (IMM2)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in bind (CVE-2017-3145)	7 Dec 202322:31	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2018-954)	18 Apr 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : bind (ALAS-2018-954)	22 Feb 201800:00	–	nessus
Tenable Nessus	ISC BIND 9 < 9.9.11-P1 / 9.9.11-S2 / 9.10.6-P1 / 9.10.6-S2 / 9.11.2-P1 / 9.12.0rc2 Multiple Vulnerabilities	19 Jan 201800:00	–	nessus

[
  {
    "product": "BIND 9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:0488
access	www.access.redhat.com/errata/RHSA-2018:0102
securityfocus	www.securityfocus.com/bid/102716
lists	www.lists.debian.org/debian-lts-announce/2018/01/msg00029.html
supportportal	www.supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named
access	www.access.redhat.com/errata/RHSA-2018:0487
access	www.access.redhat.com/errata/RHSA-2018:0101
securitytracker	www.securitytracker.com/id/1040195
debian	www.debian.org/security/2018/dsa-4089
kb	www.kb.isc.org/docs/aa-01542

16 Jun 2023 16:28Current

7.7High risk

Vulners AI Score7.7

CVSS 37.5

EPSS0.0799