Skip to content
OpenAdvisories
Medium WID-SEC-2025-1190 3 CVEs

Internet Systems Consortium BIND: Schwachstellen ermöglichen Denial of Service

Published Apr 12, 2017 · Updated May 29, 2025 · Revision 17 · de-DE

Vendor: Debian Vendor: Dell Vendor: HPE Vendor: Internet Systems Consortium Vendor: Juniper Networks Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: BIND Product: Enterprise Linux Product: HP-UX Product: Junos Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: SRX Series Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.

Vulnerabilities 3

  • High 7.5
    CVE-2017-3137

    A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurre…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2017-3138

    named exits with a REQUIRE assertion failure if it receives a null command string on its control channel

    named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situa…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2017-3136 EPSS 11%

    An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

    A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS6…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

Revision history

  1. #17

    Neue Updates von Dell aufgenommen

  2. #16

    Neue Updates von Oracle Linux aufgenommen

  3. #15

    Neue Updates von SUSE aufgenommen

  4. #14

    Neue Updates von SUSE aufgenommen

  5. #12

    New remediations available

  6. #13

    Version nicht vorhanden

  7. #10

    New remediations available

  8. #11

    Version nicht vorhanden

  9. #9

    New remediations available

  10. #7

    new vendor

  11. #8

    Version nicht vorhanden

  12. #5

    New remediations available

  13. #6

    Version nicht vorhanden

  14. #4

    New remediations available

  15. #1

    Initial Release

  16. #2

    Version nicht vorhanden

  17. #3

    Version nicht vorhanden

References