CVE-2017-3136

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-3136
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3136.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-3136
Downstream
Related
Published
2019-01-16T20:29:00.313Z
Modified
2026-07-08T05:48:47.016281984Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "9.9.0-p4"
                },
                {
                    "last_affected": "9.9.0-p4"
                },
                {
                    "introduced": "9.9.0-p4"
                },
                {
                    "last_affected": "9.9.0-p4"
                },
                {
                    "introduced": "9.9.0-p5"
                },
                {
                    "last_affected": "9.9.0-p5"
                },
                {
                    "introduced": "9.9.0-p5"
                },
                {
                    "last_affected": "9.9.0-p5"
                },
                {
                    "introduced": "9.9.0-p6"
                },
                {
                    "last_affected": "9.9.0-p6"
                },
                {
                    "introduced": "9.9.0-p6"
                },
                {
                    "last_affected": "9.9.0-p6"
                },
                {
                    "introduced": "9.9.10-beta1"
                },
                {
                    "last_affected": "9.9.10-beta1"
                },
                {
                    "introduced": "9.9.10-beta1"
                },
                {
                    "last_affected": "9.9.10-beta1"
                },
                {
                    "introduced": "9.11.1-beta1"
                },
                {
                    "last_affected": "9.11.1-beta1"
                },
                {
                    "introduced": "9.11.1-beta1"
                },
                {
                    "last_affected": "9.11.1-beta1"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "isc:bind",
            "cpes": [
                "cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.0:p4:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.0:p5:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.0:p6:*:*:*:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_desktop",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server_aus",
            "extracted_events": [
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.4"
                },
                {
                    "last_affected": "7.4"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.4"
                },
                {
                    "last_affected": "7.4"
                },
                {
                    "introduced": "7.5"
                },
                {
                    "last_affected": "7.5"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server_eus",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.3"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_server_tus",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:enterprise_linux_workstation",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
89e60b8333bbdbee905178fb0d4afaba2d60297e
Last affected
8fc2e36186691698d247ab040b83793a9189de73
Introduced
3514c49b2fbcdf95b2735878e2487fce9a3ddad5
Last affected
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
a5e4938f2d3c9d89b3fda65bc2fe6755ecfeea72
Introduced
d21bca8873d5aa80b309c84127fe1586e469320b
Last affected
ece26dd7d7f8b61e854ecb59325c18b3d3c8630a
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.8.0"
        },
        {
            "last_affected": "9.8.8"
        },
        {
            "introduced": "9.9.0"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.4"
        },
        {
            "introduced": "9.8.0-p1"
        },
        {
            "last_affected": "9.8.0-p1"
        },
        {
            "introduced": "9.9.0-p1"
        },
        {
            "last_affected": "9.9.0-p1"
        },
        {
            "introduced": "9.9.0-p2"
        },
        {
            "last_affected": "9.9.0-p2"
        },
        {
            "introduced": "9.9.0-p3"
        },
        {
            "last_affected": "9.9.0-p3"
        },
        {
            "introduced": "9.9.3"
        },
        {
            "last_affected": "9.9.3"
        },
        {
            "introduced": "9.9.3-s1"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "9.9.10-rc1"
        },
        {
            "last_affected": "9.9.10-rc1"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.10.4-p4"
        },
        {
            "last_affected": "9.10.4-p4"
        },
        {
            "introduced": "9.10.4-p5"
        },
        {
            "last_affected": "9.10.4-p5"
        },
        {
            "introduced": "9.10.4-p6"
        },
        {
            "last_affected": "9.10.4-p6"
        },
        {
            "introduced": "9.10.5-b1"
        },
        {
            "last_affected": "9.10.5-b1"
        },
        {
            "introduced": "9.10.5-rc1"
        },
        {
            "last_affected": "9.10.5-rc1"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.0"
        },
        {
            "introduced": "9.11.0-p1"
        },
        {
            "last_affected": "9.11.0-p1"
        },
        {
            "introduced": "9.11.0-p2"
        },
        {
            "last_affected": "9.11.0-p2"
        },
        {
            "introduced": "9.11.0-p3"
        },
        {
            "last_affected": "9.11.0-p3"
        },
        {
            "introduced": "9.11.1-rc1"
        },
        {
            "last_affected": "9.11.1-rc1"
        }
    ]
}

Affected versions

9.*
9.10.4-p1
9.10.4-p2
9.10.4-p3
9.10.4-p4
9.10.4-p5
9.10.4-p6
9.10.5-b1
9.10.5-rc1
9.11.0
9.11.0-p1
9.11.0-p2
9.11.0-p3
9.11.1-rc1
9.8.0-p1
9.9.0-p1
9.9.0-p2
9.9.0-p3
9.9.10-rc1
9.9.3
9.9.3-s1
v9.*
v9.8.0
v9.8.1b1
v9.8.1rc1
v9.8.2b1
v9.8.2rc1
v9.8.2rc2
v9.8.4b1
v9.8.4rc1
v9.8.5
v9.8.5b1
v9.8.5b2
v9.8.5rc1
v9.8.5rc2
v9.8.6
v9.8.6b1
v9.8.6rc1
v9.8.6rc2
v9.8.7
v9.8.7b1
v9.8.7rc1
v9.8.7rc2
v9.8.8
v9.8.8b1
v9.8.8b2
v9.8.8rc1
v9.8.8rc2
v9.9.0
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3136.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
89e60b8333bbdbee905178fb0d4afaba2d60297e
Last affected
8fc2e36186691698d247ab040b83793a9189de73
Introduced
3514c49b2fbcdf95b2735878e2487fce9a3ddad5
Last affected
b7843f9794be456c53d7dc0b51ead89f2c5d3351
Introduced
63fbb3ea39094353765c04a6066b9e1d1013992a
Last affected
a5e4938f2d3c9d89b3fda65bc2fe6755ecfeea72
Introduced
d21bca8873d5aa80b309c84127fe1586e469320b
Last affected
ece26dd7d7f8b61e854ecb59325c18b3d3c8630a
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.8.0"
        },
        {
            "last_affected": "9.8.8"
        },
        {
            "introduced": "9.9.0"
        },
        {
            "last_affected": "9.9.9"
        },
        {
            "introduced": "9.10.0"
        },
        {
            "last_affected": "9.10.4"
        },
        {
            "introduced": "9.8.0-p1"
        },
        {
            "last_affected": "9.8.0-p1"
        },
        {
            "introduced": "9.9.0-p1"
        },
        {
            "last_affected": "9.9.0-p1"
        },
        {
            "introduced": "9.9.0-p2"
        },
        {
            "last_affected": "9.9.0-p2"
        },
        {
            "introduced": "9.9.0-p3"
        },
        {
            "last_affected": "9.9.0-p3"
        },
        {
            "introduced": "9.9.3"
        },
        {
            "last_affected": "9.9.3"
        },
        {
            "introduced": "9.9.3-s1"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "9.9.10-rc1"
        },
        {
            "last_affected": "9.9.10-rc1"
        },
        {
            "introduced": "9.10.4-p1"
        },
        {
            "last_affected": "9.10.4-p1"
        },
        {
            "introduced": "9.10.4-p2"
        },
        {
            "last_affected": "9.10.4-p2"
        },
        {
            "introduced": "9.10.4-p3"
        },
        {
            "last_affected": "9.10.4-p3"
        },
        {
            "introduced": "9.10.4-p4"
        },
        {
            "last_affected": "9.10.4-p4"
        },
        {
            "introduced": "9.10.4-p5"
        },
        {
            "last_affected": "9.10.4-p5"
        },
        {
            "introduced": "9.10.4-p6"
        },
        {
            "last_affected": "9.10.4-p6"
        },
        {
            "introduced": "9.10.5-b1"
        },
        {
            "last_affected": "9.10.5-b1"
        },
        {
            "introduced": "9.10.5-rc1"
        },
        {
            "last_affected": "9.10.5-rc1"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.0"
        },
        {
            "introduced": "9.11.0-p1"
        },
        {
            "last_affected": "9.11.0-p1"
        },
        {
            "introduced": "9.11.0-p2"
        },
        {
            "last_affected": "9.11.0-p2"
        },
        {
            "introduced": "9.11.0-p3"
        },
        {
            "last_affected": "9.11.0-p3"
        },
        {
            "introduced": "9.11.1-rc1"
        },
        {
            "last_affected": "9.11.1-rc1"
        }
    ]
}

Affected versions

9.*
9.10.4-p1
9.10.4-p2
9.10.4-p3
9.10.4-p4
9.10.4-p5
9.10.4-p6
9.10.5-b1
9.10.5-rc1
9.11.0
9.11.0-p1
9.11.0-p2
9.11.0-p3
9.11.1-rc1
9.8.0-p1
9.9.0-p1
9.9.0-p2
9.9.0-p3
9.9.10-rc1
9.9.3
9.9.3-s1
v9.*
v9.8.0
v9.8.1b1
v9.8.1rc1
v9.8.2b1
v9.8.2rc1
v9.8.2rc2
v9.8.4b1
v9.8.4rc1
v9.8.5
v9.8.5b1
v9.8.5b2
v9.8.5rc1
v9.8.5rc2
v9.8.6
v9.8.6b1
v9.8.6rc1
v9.8.6rc2
v9.8.7
v9.8.7b1
v9.8.7rc1
v9.8.7rc2
v9.8.8
v9.8.8b1
v9.8.8b2
v9.8.8rc1
v9.8.8rc2
v9.9.0
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3136.json"