CVE-2017-3140

Опубликовано: 16 янв. 2019

Источник: nvd

CVSS3: 3.7

CVSS3: 5.9

CVSS2: 4.3

EPSS Средний

Описание

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

Ссылки

http://www.securityfocus.com/bid/99088
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038692
Third Party Advisory
VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us
Third Party Advisory
https://kb.isc.org/docs/aa-01495
Vendor Advisory
https://security.gentoo.org/glsa/201708-01
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0001/
Third Party Advisory
http://www.securityfocus.com/bid/99088
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038692
Third Party Advisory
VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us
Third Party Advisory
https://kb.isc.org/docs/aa-01495
Vendor Advisory
https://security.gentoo.org/glsa/201708-01
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180926-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*

Версия от 9.11.0 (включая) до 9.11.1 (включая)

cpe:2.3:a:isc:bind:9.9.10:*:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.9.10:s1:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.5:*:*:*:*:*:*:*

cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19519

Средний

3.7 Low

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2017-3140

CVSS3: 3.7

ubuntu

около 7 лет назад

CVE-2017-3140

CVSS3: 3.7

redhat

больше 8 лет назад

CVE-2017-3140

CVSS3: 3.7

debian

около 7 лет назад

If named is configured to use Response Policy Zones (RPZ) an error pro ...

GHSA-6f7c-h629-3xqv

CVSS3: 5.9

github

больше 3 лет назад

EPSS

Процентиль: 95%

0.19519

Средний

3.7 Low

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400