CVE-2017-3140

2019-01-1600:00:00

ubuntu.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.116 Low

EPSS

Percentile

95.2%

JSON

If named is configured to use Response Policy Zones (RPZ) an error
processing some rule types can lead to a condition where BIND will
endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5,
9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

Notes

Author	Note
tyhicks	Per ISC, “… affecting 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, and 9.10.5-S1” Introduced by change #4377, which is not applied in any Ubuntu releases