CVE-2017-3136

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-3136
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3136.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-3136
Downstream
Related
Published
2019-01-16T20:29:00.313Z
Modified
2026-04-16T01:38:03.919883876Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.1-beta1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.9.0:p4:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.9.0-p4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.9.0:p5:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.9.0-p5"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.9.0:p6:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.9.0-p6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.9.10-beta1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.6"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.3"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d06e7e7e585e30b419e4e20815cb8233c48f7b1
Last affected
d7e5f7903de06e504aac4a3822a41d69e159e370
Last affected
f8a0c0bed6ed629e314d22619510939c61d88b0e
Database specific 
{
    "cpe": [
        "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0"
        },
        {
            "last_affected": "7.5"
        },
        {
            "last_affected": "8.0"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

Other
ondrej/008bfb6249a5f81d9e02ad4d39fda63fab57a0ad
ondrej/00ce93a69cd809810b82dbb229abf59d8e5850cc
ondrej/067f87f158b633e18a9c6fd0b038d1dc288bcb74
ondrej/074c7cc12c0eda40441926a8a96631c3176824a9
ondrej/1a1413ff5910ace7919bb8db0a1bb1f6e9c9ff7d
ondrej/2438db2eae8baf084615aff3b210ea51cd2f1fe1
ondrej/4098157e6ce98910ff99c58c41c6cf8069b79cc7
ondrej/4281aaab4503116fcf50caa348e1b5e7d414b742
ondrej/42e84e4b97be23f2b3754844e9d4478f48e92b48
ondrej/46caf5f4a4522d42480aee4d5949ea9546f98c2f
ondrej/4d292fc37ff5e99462756352c6028af7d0becf74
ondrej/4f369af51ede0e5ac7b3a14c451c5a41350a61cc
ondrej/53738634c3b511bd78e6626df95ae140631b080c
ondrej/6d06e7e7e585e30b419e4e20815cb8233c48f7b1
ondrej/6d1fdb850516a8d1fbfa853c56a1ef7627d54a72
ondrej/761b47a64845cb647d4fa3362be538eb0e7174d9
ondrej/840e56a979c3719ded668d5aaa04b1bddce465ef
ondrej/9cd2880a82f627bc44ab65fdaa19c2bcd9e61c96
ondrej/a42afbce2e34a5f990517fee7eab013c4adb8c0a
ondrej/a5f554959ec531712f6e14a8cb8c90d87cc27932
ondrej/b177581bb230d89821d1e2e5e91f93bee3fc4192
ondrej/b6298b394e9eaefcfa2458cd56c345d778e99b8e
ondrej/be1e6499742e241d71c7e79434e278a0c89d141b
ondrej/c63b7fad498dbe56710b655bd296a58abba64bb8
ondrej/d7e5f7903de06e504aac4a3822a41d69e159e370
ondrej/e00b13ac6e5a49434fbe534b0cab86b9ee4fbdb5
ondrej/f8a0c0bed6ed629e314d22619510939c61d88b0e
ondrej/fb07c38697c9f4f76dcb921487c4f96813c99b69
v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.15.0
v9.15.2
v9.15.3
v9.15.4
v9.15.7
v9.15.8
v9.19.0
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3136.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
89e60b8333bbdbee905178fb0d4afaba2d60297e
Last affected
8fc2e36186691698d247ab040b83793a9189de73
Introduced
3514c49b2fbcdf95b2735878e2487fce9a3ddad5
Last affected
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
a5e4938f2d3c9d89b3fda65bc2fe6755ecfeea72
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d21bca8873d5aa80b309c84127fe1586e469320b
Last affected
8a2d9ba36c16111ebb3be1a1c61fa0ebc2610c40
Last affected
9596ff0d5d69ef5dacfe431e2204f348804871e8
Last affected
ac8984d5aeda3fa63977ed89f6940db36839b0f7
Last affected
d281b39456519db31c6213d010d30d99df8cf852
Last affected
1c59cea1c0e26e2da3f2afb90200bfe9f7748c03
Last affected
c7fb2ad1605536230063bdbfd31dc9c2874f5ecd
Last affected
632f9848811641da54fbb78c38e91a263b03d85a
Last affected
d36f894b881427035c9163b939cb64c75e6fdd7a
Last affected
2f98c1c2a0b92c83cd9a9e6d53363537f4819c40
Last affected
853aa4b2e04de28173429fc24780b21fadb5cef5
Last affected
2b12043ba0debf1aba08ddd0914aff287e46978a
Last affected
a6837d0b7879b828a394bfab852dc1b45e7fbc8b
Last affected
341e64a2de908ceec50ed46d243bf3402342735c
Last affected
66d4de0075b24a264b19bd594835f66a17f51385
Last affected
1477c19dd9a347ee19a42dac227f299a4680506f
Last affected
dca6957b62013f523e54084c92152f571d08f6c0
Last affected
111ec860a840d09dbd0551044e5fdc37d546c6b6
Last affected
a23f742c3d767f41bfb1a143b0605a766936c4d9
Last affected
ece26dd7d7f8b61e854ecb59325c18b3d3c8630a
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*"
    ],
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "9.8.0"
        },
        {
            "last_affected": "9.8.8"
        },
        {
            "introduced": "9.9.0"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.8.0-p1"
        },
        {
            "last_affected": "9.9.0-p1"
        },
        {
            "last_affected": "9.9.0-p2"
        },
        {
            "last_affected": "9.9.0-p3"
        },
        {
            "last_affected": "9.9.3"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "last_affected": "9.9.10-rc1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p4"
        },
        {
            "last_affected": "9.10.4-p5"
        },
        {
            "last_affected": "9.10.4-p6"
        },
        {
            "last_affected": "9.10.5-b1"
        },
        {
            "last_affected": "9.10.5-rc1"
        },
        {
            "last_affected": "9.11.0"
        },
        {
            "last_affected": "9.11.0-p1"
        },
        {
            "last_affected": "9.11.0-p2"
        },
        {
            "last_affected": "9.11.0-p3"
        },
        {
            "last_affected": "9.11.1-rc1"
        }
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.10.0rc2
v9.10.1
v9.10.1b1
v9.10.1b2
v9.10.1rc1
v9.10.1rc2
v9.10.2
v9.10.2b1
v9.10.2rc1
v9.10.2rc2
v9.10.3
v9.10.3b1
v9.10.3rc1
v9.10.4
v9.10.4-P1
v9.10.4-P2
v9.10.4-P3
v9.10.4-P4
v9.10.4-P5
v9.10.4-P6
v9.10.4b1
v9.10.4b2
v9.10.4b3
v9.10.4rc1
v9.10.5b1
v9.10.5rc1
v9.11.0
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.11.0rc2
v9.11.0rc3
v9.11.1b1
v9.11.1rc1
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.8.0
v9.8.0b1
v9.8.1b1
v9.8.1rc1
v9.8.2b1
v9.8.2rc1
v9.8.2rc2
v9.8.4b1
v9.8.4rc1
v9.8.5
v9.8.5b1
v9.8.5b2
v9.8.5rc1
v9.8.5rc2
v9.8.6
v9.8.6b1
v9.8.6rc1
v9.8.6rc2
v9.8.7
v9.8.7b1
v9.8.7rc1
v9.8.7rc2
v9.8.8
v9.8.8b1
v9.8.8b2
v9.8.8rc1
v9.8.8rc2
v9.9.0
v9.9.0a3
v9.9.0b1
v9.9.0b2
v9.9.1
v9.9.10b1
v9.9.10rc1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3136.json"