Lucene search

[email protected]NVD:CVE-2017-3140

HistoryJan 16, 2019 - 8:29 p.m.

CVE-2017-3140

2019-01-1620:29:00

CWE-400

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0.116

Percentile

95.3%

JSON

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

Affected configurations

Nvd

Node

iscbindRange9.11.0–9.11.1

iscbindMatch9.9.10

iscbindMatch9.9.10s1

iscbindMatch9.10.5

iscbindMatch9.10.5s1

Node

netappdata_ontap_edgeMatch-

netappelement_softwareMatch-

netapponcommand_balanceMatch-

VendorProductVersionCPE
iscbind*cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*
iscbind9.9.10cpe:2.3:a:isc:bind:9.9.10:*:*:*:*:*:*:*
iscbind9.9.10cpe:2.3:a:isc:bind:9.9.10:s1:*:*:*:*:*:*
iscbind9.10.5cpe:2.3:a:isc:bind:9.10.5:*:*:*:*:*:*:*
iscbind9.10.5cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*
netappdata_ontap_edge-cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
netappelement_software-cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
netapponcommand_balance-cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
isc	bind	*	cpe:2.3:a:isc:bind::::::::
isc	bind	9.9.10	cpe:2.3:a:isc:bind:9.9.10:::::::*
isc	bind	9.9.10	cpe:2.3:a:isc:bind:9.9.10:s1::::::
isc	bind	9.10.5	cpe:2.3:a:isc:bind:9.10.5:::::::*
isc	bind	9.10.5	cpe:2.3:a:isc:bind:9.10.5:s1::::::
netapp	data_ontap_edge	-	cpe:2.3:a:netapp:data_ontap_edge:-:::::::*
netapp	element_software	-	cpe:2.3:a:netapp:element_software:-:::::::*
netapp	oncommand_balance	-	cpe:2.3:a:netapp:oncommand_balance:-:::::::*