Vulnerabilities

TI-2017-02358 CVE-2017-3138 · GHSA-q858-q2j2-9jg4

named exits with a REQUIRE assertion failure if it receives a null command string on its control channel

LOW 37

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05503 Published 2019-01-16 No fix listed CWE-617

TI-2017-02357 CVE-2017-3137 · GHSA-wmp5-3j44-5x2x

A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

MEDIUM 44

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when process…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08902 Published 2019-01-16 Partial fix CWE-617

TI-2017-02356 CVE-2017-3136 · GHSA-835v-j5fw-qqvq

An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

MEDIUM 40

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.11093 Published 2019-01-16 Fixed CWE-617

Vulnerabilities

Filters

named exits with a REQUIRE assertion failure if it receives a null command string on its control channel

A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"