Skip to content
OpenAdvisories
Medium WID-SEC-2025-1189 1 CVE

Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service

Published Feb 8, 2017 · Updated Jun 1, 2025 · Revision 11 · de-DE

Vendor: Debian Vendor: Dell Vendor: HPE Vendor: Internet Systems Consortium Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: BIND Product: Enterprise Linux Product: HP-UX Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.

Vulnerabilities 1

  • High 7.5
    CVE-2017-3135 EPSS 17%

    Combination of DNS64 and RPZ Can Lead to Crash

    Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

Revision history

  1. #11

    Korrektur

  2. #10

    Neue Updates von Dell aufgenommen

  3. #9

    Added references

  4. #8

    New remediations available

  5. #7

    New remediations available

  6. #6

    New remediations available

  7. #5

    New remediations available

  8. #4

    New remediations available

  9. #3

    New remediations available

  10. #1

    Initial Release

  11. #2

    Version nicht vorhanden

References