CLEANSTART-2025-PZ89979 BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named

🗓️ 31 Oct 2026 14:00:39Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 5 Views

Use-after-free in BIND cleanup operations on upstream recursion fetch contexts causes crash.

Reporter	Title	Published	Views	Family All 149
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt1	26 Aug 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.2.P1-alt1	17 Jan 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2017-3145	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in bind affects PowerKVM	18 Jun 201801:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in bind (CVE-2017-3145)	10 Sep 201819:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Management Module II (IMM2)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in bind (CVE-2017-3145)	7 Dec 202322:31	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2018-954)	18 Apr 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : bind (ALAS-2018-954)	22 Feb 201800:00	–	nessus
Tenable Nessus	ISC BIND 9 < 9.9.11-P1 / 9.9.11-S2 / 9.10.6-P1 / 9.10.6-S2 / 9.11.2-P1 / 9.12.0rc2 Multiple Vulnerabilities	19 Jan 201800:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2025/CLEANSTART-2025-PZ89979.json
osv	www.osv.dev/vulnerability/CVE-2017-3145
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-3145

31 Oct 2026 16:03Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.27725

BIND use-after-free upstream recursion fetch contexts crash