Skip to content
OpenAdvisories
High USN-3201-1 1 CVE

bind9 vulnerabilities

Published Feb 16, 2017 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled rewriting certain query
responses when using both DNS64 and RPZ. A remote attacker could possibly
use this issue to cause Bind to crash, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.13
Ubuntu · 16.04 LTS 16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.5

Vulnerabilities 1

  • High 7.5
    CVE-2017-3135 EPSS 17%

    Combination of DNS64 and RPZ Can Lead to Crash

    Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2017-3135