CVE-2017-3140

An error processing RPZ rules can cause named to loop endlessly after handling a query

Low · published January 16, 2019

CVSS v3.0

3.7

EPSS

12%

Percentile

96.1

In the wild

Unconfirmed

What it is

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

The record

Technical detail

CVSS v3.0: 3.7 · LOW
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.12227 · 96.1th percentile
Published: 2019-01-16T20:00Z

EPSS history

Timeline

16 JAN 20:00Z
An error processing RPZ rules can cause named to loop endlessly after handling a query
cvelistv5