CVE-2017-3135

Combination of DNS64 and RPZ Can Lead to Crash

High · published January 16, 2019

CVSS v3.0

7.5

EPSS

17%

Percentile

97.1

In the wild

Unconfirmed

What it is

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

The record

Technical detail

CVSS v3.0: 7.5 · HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.17243 · 97.1th percentile
Published: 2019-01-16T20:00Z

EPSS history

Timeline

16 JAN 20:00Z
Combination of DNS64 and RPZ Can Lead to Crash
cvelistv5