Read the docs
TI-2017-02365 Aliases CVE-2017-3145GHSA-3hx4-77f4-g7cp

Improper fetch cleanup sequencing in the resolver can cause named to crash

Priority MEDIUM 55CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 40 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.

Why it matters now

EPSS 0.27725 98th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 40 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ISCBIND 99.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1—No fix listedCNA
  • BIND 9 VendorISC Affected 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1 Fixed in — No fix listed CNA

CPE configurations NVD · 69

CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*9.4.0 – 9.8.8; 9.9.0 – 9.9.11; 9.10.0 – 9.10.6; 9.11.0 – 9.11.2VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*9.9.3 s1VulnerableISC
cpe:2.3:a:isc:bind:9.9.11:s1:*:*:*:*:*:*9.9.11 s1VulnerableISC
cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*9.10.5 s1VulnerableISC
cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:*9.10.6 s1VulnerableISC
cpe:2.3:a:isc:bind:9.12.0:alpha1:*:*:*:*:*:*9.12.0 alpha1VulnerableISC
cpe:2.3:a:isc:bind:9.12.0:b1:*:*:*:*:*:*9.12.0 b1VulnerableISC
cpe:2.3:a:isc:bind:9.12.0:b2:*:*:*:*:*:*9.12.0 b2VulnerableISC
cpe:2.3:a:isc:bind:9.12.0:rc1:*:*:*:*:*:*9.12.0 rc1VulnerableISC
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* Versions 9.4.0 – 9.8.8; 9.9.0 – 9.9.11; 9.10.0 – 9.10.6; 9.11.0 – 9.11.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:* Versions 9.9.3 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.11:s1:*:*:*:*:*:* Versions 9.9.11 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:* Versions 9.10.5 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:* Versions 9.10.6 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.12.0:alpha1:*:*:*:*:*:* Versions 9.12.0 alpha1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.12.0:b1:*:*:*:*:*:* Versions 9.12.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.12.0:b2:*:*:*:*:*:* Versions 9.12.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.12.0:rc1:*:*:*:*:*:* Versions 9.12.0 rc1 Vulnerable ·ISC
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 59 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:juniper:junos:12.1x46-d76:-:*:*:*:*:*:*12.1x46-d76VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48-d70:-:*:*:*:*:*:*12.3x48-d70VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49-d140:-:*:*:*:*:*:*15.1x49-d140VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4r2:-:*:*:*:*:*:*17.4r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1r2:-:*:*:*:*:*:*18.1r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2r1:-:*:*:*:*:*:*18.2r1VulnerableJuniper
cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:juniper:junos:12.1x46-d76:-:*:*:*:*:*:* Versions 12.1x46-d76 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48-d70:-:*:*:*:*:*:* Versions 12.3x48-d70 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49-d140:-:*:*:*:*:*:* Versions 15.1x49-d140 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4r2:-:*:*:*:*:*:* Versions 17.4r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1r2:-:*:*:*:*:*:* Versions 18.1r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2r1:-:*:*:*:*:*:* Versions 18.2r1 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper

Remediation

Red Hat 4 advisories

  • RHSA-2018:0487 Released 2018-03-12 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-libs-32:9.8.2-0.37.rc1.el6_7.12, bind-utils-32:9.8.2-0.37.rc1.el6_7.12
    • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-chroot-32:9.8.2-0.37.rc1.el6_7.12, bind-devel-32:9.8.2-0.37.rc1.el6_7.12 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.13, bind-chroot-32:9.8.2-0.17.rc1.el6_4.13, bind-libs-32:9.8.2-0.17.rc1.el6_4.13 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.8, bind-chroot-32:9.8.2-0.23.rc1.el6_5.8, bind-libs-32:9.8.2-0.23.rc1.el6_5.8 +1
    • Red Hat Enterprise Linux Server AUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.10, bind-chroot-32:9.8.2-0.30.rc1.el6_6.10, bind-libs-32:9.8.2-0.30.rc1.el6_6.10 +1
    • Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-chroot-32:9.8.2-0.37.rc1.el6_7.12, bind-libs-32:9.8.2-0.37.rc1.el6_7.12 +2
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.13, bind-devel-32:9.8.2-0.17.rc1.el6_4.13, bind-sdb-32:9.8.2-0.17.rc1.el6_4.13
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.8, bind-devel-32:9.8.2-0.23.rc1.el6_5.8, bind-sdb-32:9.8.2-0.23.rc1.el6_5.8
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.10, bind-sdb-32:9.8.2-0.30.rc1.el6_6.10
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.12, bind-devel-32:9.8.2-0.37.rc1.el6_7.12.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.12
    • Red Hat Enterprise Linux Server Optional TUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.10, bind-sdb-32:9.8.2-0.30.rc1.el6_6.10
    • Red Hat Enterprise Linux Server TUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.10, bind-chroot-32:9.8.2-0.30.rc1.el6_6.10, bind-libs-32:9.8.2-0.30.rc1.el6_6.10 +1
  • RHSA-2018:0488 Released 2018-03-12 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-libs-32:9.9.4-50.el7_3.3, bind-libs-lite-32:9.9.4-50.el7_3.3 +2
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-chroot-32:9.9.4-50.el7_3.3, bind-devel-32:9.9.4-50.el7_3.3 +7
    • Red Hat Enterprise Linux Server AUS (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
    • Red Hat Enterprise Linux Server E4S (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
    • Red Hat Enterprise Linux Server EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-chroot-32:9.9.4-50.el7_3.3, bind-libs-32:9.9.4-50.el7_3.3 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.3) bind-devel-32:9.9.4-50.el7_3.3, bind-devel-32:9.9.4-50.el7_3.3.ppc, bind-lite-devel-32:9.9.4-50.el7_3.3 +9
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
    • Red Hat Enterprise Linux Server TUS (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
  • RHSA-2018:0102 Released 2018-01-22 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2, bind-libs-lite-32:9.9.4-51.el7_4.2 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2 +7
    • Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2, bind-libs-lite-32:9.9.4-51.el7_4.2 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2 +7
    • Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +8
    • Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2.ppc, bind-lite-devel-32:9.9.4-51.el7_4.2 +9
    • Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-lite-devel-32:9.9.4-51.el7_4.2, bind-pkcs11-devel-32:9.9.4-51.el7_4.2 +2
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +6
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-lite-devel-32:9.9.4-51.el7_4.2, bind-pkcs11-devel-32:9.9.4-51.el7_4.2 +2
Show 1 more Red Hat advisories
  • RHSA-2018:0101 Released 2018-01-22 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5, bind-utils-32:9.8.2-0.62.rc1.el6_9.5
    • Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5 +1
    • Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5, bind-utils-32:9.8.2-0.62.rc1.el6_9.5
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5 +1
    • Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5 +2
    • Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5.ppc, bind-sdb-32:9.8.2-0.62.rc1.el6_9.5
    • Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5 +1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.5, bind-sdb-32:9.8.2-0.62.rc1.el6_9.5

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)Fixed RHSA-2018:0488
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux HPC Node EUS (v. 6.7)Fixed RHSA-2018:0487
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux Server AUS (v. 6.4)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server AUS (v. 6.6)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server E4S (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server EUS (v. 7.3)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux Server Optional AUS (v. 6.4)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server Optional AUS (v. 6.5)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server Optional AUS (v. 6.6)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server Optional E4S (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server Optional EUS (v. 6.7)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server Optional EUS (v. 7.3)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server Optional TUS (v. 6.6)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server Optional TUS (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Server TUS (v. 6.6)Fixed RHSA-2018:0487
Red Hat Enterprise Linux Server TUS (v. 7.2)Fixed RHSA-2018:0488
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2018:0101
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:0102
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:0102
Not affected: 1 product
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-3145
  2. 2026-10-03 Alias added: GHSA-3hx4-77f4-g7cp

References

Advisory 9

  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2023-27571 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related… CVSS 3.1HIGH 7.5
  • TI-2021-07476 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVSS 3.1CRITICAL 9.8
  • TI-2023-27773 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… CVSS 3.1HIGH 7.5
  • TI-2020-06910 A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVSS 3.1HIGH 7.5
  • TI-2016-02320 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x… CVSS 3.0HIGH 7.5
See all 192 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences