USN-3259-1
- Source
- https://ubuntu.com/security/notices/USN-3259-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3259-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3259-1
- Upstream
- Related
- Published
- 2017-04-17T18:21:01.522843Z
- Modified
- 2025-10-13T04:34:22Z
- Summary
- bind9 vulnerabilities
- Details
-
It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. An attacker could use this cause a denial of service. (CVE-2017-3137)
Oleg Gorokhov discovered that in some situations, Bind did not properly handle DNS64 queries. An attacker could use this to cause a denial of service. (CVE-2017-3136)
Mike Lalumiere discovered that in some situations, Bind did not properly handle invalid operations requested via its control channel. An attacker with access to the control channel could cause a denial of service. (CVE-2017-3138)
- References
Affected packages
Ubuntu:14.04:LTS / bind9
Package
- Name
- bind9
- Purl
- pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.14?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:9.9.5.dfsg-3ubuntu0.14
Affected versions
1:9.*
1:9.9.3.dfsg.P2-4ubuntu1
1:9.9.3.dfsg.P2-4ubuntu2
1:9.9.3.dfsg.P2-4ubuntu3
1:9.9.5.dfsg-2
1:9.9.5.dfsg-3
1:9.9.5.dfsg-3ubuntu0.1
1:9.9.5.dfsg-3ubuntu0.2
1:9.9.5.dfsg-3ubuntu0.3
1:9.9.5.dfsg-3ubuntu0.4
1:9.9.5.dfsg-3ubuntu0.5
1:9.9.5.dfsg-3ubuntu0.6
1:9.9.5.dfsg-3ubuntu0.7
1:9.9.5.dfsg-3ubuntu0.8
1:9.9.5.dfsg-3ubuntu0.9
1:9.9.5.dfsg-3ubuntu0.10
1:9.9.5.dfsg-3ubuntu0.11
1:9.9.5.dfsg-3ubuntu0.12
1:9.9.5.dfsg-3ubuntu0.13
Ecosystem specific
{
"binaries": [
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "bind9"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libbind9-90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libdns100"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libisc95"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libisccc90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "libisccfg90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "liblwres90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.14",
"binary_name": "lwresd"
}
],
"availability": "No subscription required"
}
Database specific
{
"cves_map": {
"cves": [
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3136"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3137"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3138"
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}
}
Ubuntu:16.04:LTS / bind9
Package
- Name
- bind9
- Purl
- pkg:deb/ubuntu/bind9@1:9.10.3.dfsg.P4-8ubuntu1.6?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:9.10.3.dfsg.P4-8ubuntu1.6
Affected versions
1:9.*
1:9.9.5.dfsg-11ubuntu1
1:9.9.5.dfsg-12
1:9.9.5.dfsg-12.1
1:9.9.5.dfsg-12.1ubuntu1
1:9.10.3.dfsg.P2-4
1:9.10.3.dfsg.P2-5
1:9.10.3.dfsg.P4-3
1:9.10.3.dfsg.P4-4
1:9.10.3.dfsg.P4-5
1:9.10.3.dfsg.P4-8
1:9.10.3.dfsg.P4-8ubuntu1
1:9.10.3.dfsg.P4-8ubuntu1.1
1:9.10.3.dfsg.P4-8ubuntu1.2
1:9.10.3.dfsg.P4-8ubuntu1.3
1:9.10.3.dfsg.P4-8ubuntu1.4
1:9.10.3.dfsg.P4-8ubuntu1.5
Ecosystem specific
{
"binaries": [
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "bind9"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "host"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libbind-export-dev"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libbind9-140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libdns-export162"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libdns162"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libirs-export141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libirs141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisc-export160"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisc160"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisccc-export140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisccc140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisccfg-export140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "libisccfg140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "liblwres141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.6",
"binary_name": "lwresd"
}
],
"availability": "No subscription required"
}
Database specific
{
"cves_map": {
"cves": [
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3136"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3137"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-3138"
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
}