CVE-2017-3138

Source
https://cve.org/CVERecord?id=CVE-2017-3138
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3138.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-3138
Downstream
Related
Published
2019-01-16T20:29:00.407Z
Modified
2026-07-17T20:58:57.239322536Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                }
            ],
            "vendor_product": "debian:debian_linux",
            "source": "CPE_STRING"
        },
        {
            "cpes": [
                "cpe:2.3:a:isc:bind:9.10.4:p7:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.0:p4:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.9:p7:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "9.9.9-p7"
                },
                {
                    "last_affected": "9.9.9-p7"
                },
                {
                    "introduced": "9.9.9-p7"
                },
                {
                    "last_affected": "9.9.9-p7"
                },
                {
                    "introduced": "9.9.9-s7"
                },
                {
                    "last_affected": "9.9.9-s7"
                },
                {
                    "introduced": "9.9.9-s7"
                },
                {
                    "last_affected": "9.9.9-s7"
                },
                {
                    "introduced": "9.9.10-beta1"
                },
                {
                    "last_affected": "9.9.10-beta1"
                },
                {
                    "introduced": "9.9.10-beta1"
                },
                {
                    "last_affected": "9.9.10-beta1"
                },
                {
                    "introduced": "9.10.4-p7"
                },
                {
                    "last_affected": "9.10.4-p7"
                },
                {
                    "introduced": "9.10.4-p7"
                },
                {
                    "last_affected": "9.10.4-p7"
                },
                {
                    "introduced": "9.11.0-p4"
                },
                {
                    "last_affected": "9.11.0-p4"
                },
                {
                    "introduced": "9.11.0-p4"
                },
                {
                    "last_affected": "9.11.0-p4"
                }
            ],
            "vendor_product": "isc:bind",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Database specific
{
    "extracted_events": [
        {
            "introduced": "9.9.9"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.9.9-s1"
        },
        {
            "last_affected": "9.9.9-s1"
        },
        {
            "introduced": "9.9.9-p2"
        },
        {
            "last_affected": "9.9.9-p2"
        },
        {
            "introduced": "9.9.9-p3"
        },
        {
            "last_affected": "9.9.9-p3"
        },
        {
            "introduced": "9.9.9-p4"
        },
        {
            "last_affected": "9.9.9-p4"
        },
        {
            "introduced": "9.9.9-p5"
        },
        {
            "last_affected": "9.9.9-p5"
        },
        {
            "introduced": "9.9.9-p6"
        },
        {
            "last_affected": "9.9.9-p6"
        },
        {
            "introduced": "9.9.10-rc1"
        },
        {
            "last_affected": "9.9.10-rc1"
        },
        {
            "introduced": "9.9.10-rc2"
        },
        {
            "last_affected": "9.9.10-rc2"
        },
        {
            "introduced": "9.10.4"
        },
        {
            "last_affected": "9.10.4"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.10.4-p4"
        },
        {
            "last_affected": "9.10.4-p4"
        },
        {
            "introduced": "9.10.4-p5"
        },
        {
            "last_affected": "9.10.4-p5"
        },
        {
            "introduced": "9.10.4-p6"
        },
        {
            "last_affected": "9.10.4-p6"
        },
        {
            "introduced": "9.10.5-b1"
        },
        {
            "last_affected": "9.10.5-b1"
        },
        {
            "introduced": "9.10.5-rc1"
        },
        {
            "last_affected": "9.10.5-rc1"
        },
        {
            "introduced": "9.10.5-rc2"
        },
        {
            "last_affected": "9.10.5-rc2"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.0"
        },
        {
            "introduced": "9.11.0-p1"
        },
        {
            "last_affected": "9.11.0-p1"
        },
        {
            "introduced": "9.11.0-p2"
        },
        {
            "last_affected": "9.11.0-p2"
        },
        {
            "introduced": "9.11.0-p3"
        },
        {
            "last_affected": "9.11.0-p3"
        },
        {
            "introduced": "9.11.1-b1"
        },
        {
            "last_affected": "9.11.1-b1"
        },
        {
            "introduced": "9.11.1-rc1"
        },
        {
            "last_affected": "9.11.1-rc1"
        },
        {
            "introduced": "9.11.1-rc2"
        },
        {
            "last_affected": "9.11.1-rc2"
        }
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:9.9.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc2:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

9.*
9.10.4
9.10.4-p1
9.10.4-p2
9.10.4-p3
9.10.4-p4
9.10.4-p5
9.10.4-p6
9.10.5-b1
9.10.5-rc1
9.10.5-rc2
9.11.0
9.11.0-p1
9.11.0-p2
9.11.0-p3
9.11.1-b1
9.11.1-rc1
9.11.1-rc2
9.9.10-rc1
9.9.10-rc2
9.9.9
9.9.9-p1
9.9.9-p2
9.9.9-p3
9.9.9-p4
9.9.9-p5
9.9.9-p6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3138.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Database specific
{
    "extracted_events": [
        {
            "introduced": "9.9.9"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.9.9-p1"
        },
        {
            "last_affected": "9.9.9-p1"
        },
        {
            "introduced": "9.9.9-s1"
        },
        {
            "last_affected": "9.9.9-s1"
        },
        {
            "introduced": "9.9.9-p2"
        },
        {
            "last_affected": "9.9.9-p2"
        },
        {
            "introduced": "9.9.9-p3"
        },
        {
            "last_affected": "9.9.9-p3"
        },
        {
            "introduced": "9.9.9-p4"
        },
        {
            "last_affected": "9.9.9-p4"
        },
        {
            "introduced": "9.9.9-p5"
        },
        {
            "last_affected": "9.9.9-p5"
        },
        {
            "introduced": "9.9.9-p6"
        },
        {
            "last_affected": "9.9.9-p6"
        },
        {
            "introduced": "9.9.10-rc1"
        },
        {
            "last_affected": "9.9.10-rc1"
        },
        {
            "introduced": "9.9.10-rc2"
        },
        {
            "last_affected": "9.9.10-rc2"
        },
        {
            "introduced": "9.10.4"
        },
        {
            "last_affected": "9.10.4"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.10.4-p4"
        },
        {
            "last_affected": "9.10.4-p4"
        },
        {
            "introduced": "9.10.4-p5"
        },
        {
            "last_affected": "9.10.4-p5"
        },
        {
            "introduced": "9.10.4-p6"
        },
        {
            "last_affected": "9.10.4-p6"
        },
        {
            "introduced": "9.10.5-b1"
        },
        {
            "last_affected": "9.10.5-b1"
        },
        {
            "introduced": "9.10.5-rc1"
        },
        {
            "last_affected": "9.10.5-rc1"
        },
        {
            "introduced": "9.10.5-rc2"
        },
        {
            "last_affected": "9.10.5-rc2"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.0"
        },
        {
            "introduced": "9.11.0-p1"
        },
        {
            "last_affected": "9.11.0-p1"
        },
        {
            "introduced": "9.11.0-p2"
        },
        {
            "last_affected": "9.11.0-p2"
        },
        {
            "introduced": "9.11.0-p3"
        },
        {
            "last_affected": "9.11.0-p3"
        },
        {
            "introduced": "9.11.1-b1"
        },
        {
            "last_affected": "9.11.1-b1"
        },
        {
            "introduced": "9.11.1-rc1"
        },
        {
            "last_affected": "9.11.1-rc1"
        },
        {
            "introduced": "9.11.1-rc2"
        },
        {
            "last_affected": "9.11.1-rc2"
        }
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:9.9.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.9:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc2:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

9.*
9.10.4
9.10.4-p1
9.10.4-p2
9.10.4-p3
9.10.4-p4
9.10.4-p5
9.10.4-p6
9.10.5-b1
9.10.5-rc1
9.10.5-rc2
9.11.0
9.11.0-p1
9.11.0-p2
9.11.0-p3
9.11.1-b1
9.11.1-rc1
9.11.1-rc2
9.9.10-rc1
9.9.10-rc2
9.9.9
9.9.9-p1
9.9.9-p2
9.9.9-p3
9.9.9-p4
9.9.9-p5
9.9.9-p6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3138.json"