Lucene search
AttackerKBAKB:0DD933A3-73AA-4C00-A2CF-953B5DC3BFA6HistoryOct 30, 2019 - 12:00 a.m.
Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858
2019-10-3000:00:00
attackerkb.com
7
0.191 Low
EPSS
Percentile
96.3%
The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.
Recent assessments:
busterb at October 30, 2019 8:04pm UTC reported:
Probably not that interesting of a bug for an attacker. Basically you can DoS a BIND server. I sort of think most folks using BIND in a critical environment are likely using the ISC releases anyway. It is telling that the bug in this backport appears to have taken a year to discover.
Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 2
Related
debiancve
debiancve
CVE-2018-5735
2019-10-30 14:15:11
CVE-2017-3137
2019-01-16 20:29:00
f5
f5
K43084130 : BIND vulnerability CVE-2018-5735
2018-03-06 00:00:00
K30164784 : BIND vulnerability CVE-2017-3137
2017-04-26 00:00:00
cve
cve
CVE-2018-5735
2019-10-30 14:15:11
CVE-2017-3137
2019-01-16 20:29:00
nvd
nvd
CVE-2018-5735
2019-10-30 14:15:11
CVE-2017-3137
2019-01-16 20:29:00
ubuntucve
ubuntucve
CVE-2018-5735
2018-02-16 00:00:00
CVE-2017-3137
2017-04-12 00:00:00
prion
prion
Authentication flaw
2019-10-30 14:15:00
Code injection
2019-01-16 20:29:00
cvelist
cvelist
redhatcve
redhatcve
CVE-2018-5735
2020-04-08 05:00:16
CVE-2017-3137
2019-10-16 00:31:57
openvas
openvas
Ubuntu: Security Advisory (USN-3574-1)
2022-08-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1027-1)
2021-06-09 00:00:00
ISC BIND DoS Vulnerability (CVE-2017-3137) - Linux
2021-09-06 00:00:00
osv
osv
bind9 - security update
2018-02-16 00:00:00
CVE-2017-3137
2019-01-16 20:29:00
bind9 - security update
2017-05-14 00:00:00
ubuntu
ubuntu
Bind vulnerability
2018-02-19 00:00:00
Bind vulnerabilities
2017-04-17 00:00:00
checkpoint_advisories
checkpoint_advisories
suse
suse
Security update for bind (important)
2017-04-18 06:09:37
Security update for bind (important)
2017-04-13 06:10:58
Security update for bind (important)
2017-04-13 06:09:37
alpinelinux
alpinelinux
CVE-2017-3137
2019-01-16 20:29:00
veracode
veracode
Denial Of Service (DoS)
2019-01-17 05:20:33
nessus
nessus
SUSE SLES11 Security Update : bind (SUSE-SU-2017:1027-1)
2017-04-18 00:00:00
Debian DLA-1285-1 : bind9 security update
2018-02-20 00:00:00
Oracle Linux 6 : bind (ELSA-2017-1105)
2017-04-21 00:00:00
debian
debian
[SECURITY] [DLA 1285-1] bind9 security update
2018-02-16 21:33:13
[SECURITY] [DLA 957-1] bind9 security update
2017-05-28 13:21:05
[SECURITY] [DSA 3854-1] bind9 security update
2017-05-14 17:47:46
amazon
amazon
Important: bind
2017-04-27 00:07:00
redhat
redhat
(RHSA-2017:1095) Important: bind security update
2017-04-19 04:10:01
(RHSA-2017:1105) Important: bind security update
2017-04-20 08:30:27
(RHSA-2017:1582) Important: bind security and bug fix update
2017-06-28 07:45:28
centos
centos
bind security update
2017-04-20 22:44:08
bind security update
2017-04-19 16:57:53
oraclelinux
oraclelinux
bind security update
2017-04-19 00:00:00
bind security update
2017-04-20 00:00:00
avleonov
avleonov
Adding third party nasl plugins to OpenVAS
2017-06-30 16:46:24
fedora
fedora
[SECURITY] Fedora 25 Update: bind-9.10.4-4.P8.fc25
2017-04-19 09:32:38
[SECURITY] Fedora 25 Update: bind99-9.9.9-4.P8.fc25
2017-04-19 09:32:40
[SECURITY] Fedora 24 Update: bind99-9.9.9-4.P8.fc24
2017-05-06 23:52:20
slackware
slackware
[slackware-security] bind
2017-04-13 21:28:31
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1
2017-04-12 00:00:00
Security fix for the ALT Linux 8 package bind version 9.10.4.P8-alt1
2017-04-12 00:00:00
freebsd
freebsd
BIND -- multiple vulnerabilities
2017-04-12 00:00:00
cisa
cisa
ISC Releases Security Updates for BIND
2017-04-12 00:00:00
cloudfoundry
cloudfoundry
USN-3259-1: Bind vulnerabilities | Cloud Foundry
2017-05-01 00:00:00
archlinux
archlinux
[ASA-201704-11] bind: denial of service
2017-04-29 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2017-08-17 00:00:00
mageia
mageia
Updated bind packages fix security vulnerability
2017-12-31 15:00:06