CVE-2017-3138

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
iscbind
9.9.9
iscbind
9.9.9:p1
iscbind
9.9.9:p2
iscbind
9.9.9:p3
iscbind
9.9.9:p4
iscbind
9.9.9:p5
iscbind
9.9.9:p6
iscbind
9.9.9:p7
iscbind
9.9.9:s1
iscbind
9.9.9:s7
iscbind
9.9.10:beta1
iscbind
9.9.10:rc1
iscbind
9.9.10:rc2
iscbind
9.10.4
iscbind
9.10.4:p1
iscbind
9.10.4:p2
iscbind
9.10.4:p3
iscbind
9.10.4:p4
iscbind
9.10.4:p5
iscbind
9.10.4:p6
iscbind
9.10.4:p7
iscbind
9.10.5:b1
iscbind
9.10.5:rc1
iscbind
9.10.5:rc2
iscbind
9.11.0
iscbind
9.11.0:p1
iscbind
9.11.0:p2
iscbind
9.11.0:p3
iscbind
9.11.0:p4
iscbind
9.11.1:b1
iscbind
9.11.1:rc1
iscbind
9.11.1:rc2
netappdata_ontap_edge
-
netappelement_software
-
netapponcommand_balance
-
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
precise
Fixed 1:9.8.1.dfsg.P1-4ubuntu0.22
released
trusty
Fixed 1:9.9.5.dfsg-3ubuntu0.14
released
xenial
Fixed 1:9.10.3.dfsg.P4-8ubuntu1.6
released
yakkety
Fixed 1:9.10.3.dfsg.P4-10.1ubuntu1.6
released
zesty
Fixed 1:9.10.3.dfsg.P4-10.1ubuntu5
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
bind
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-chrootenv
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
bind-devel
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
bind-doc
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-utils
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise desktop 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise desktop 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise desktop 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise sap 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise server 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
libbind9-160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libbind9-1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
libdns1605
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libdns169
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libirs-devel
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libirs160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libirs1601
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libisc1606
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libisc166
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisc166-32bit
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
libisccc160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisccc1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
libisccfg160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisccfg1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
liblwres160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libns1604
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
python-bind
suse enterprise sap 12 SP5
9.11.2-3.10.1
fixed
suse enterprise server 12 SP5
9.11.2-3.10.1
fixed
python3-bind
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise desktop 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP5
9.16.38-150400.5.20.2
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97657
http://www.securitytracker.com/id/1038260
https://kb.isc.org/docs/aa-01471
https://security.gentoo.org/glsa/201708-01
https://security.netapp.com/advisory/ntap-20180802-0002/
https://www.debian.org/security/2017/dsa-3854
http://www.securityfocus.com/bid/97657
http://www.securitytracker.com/id/1038260
https://kb.isc.org/docs/aa-01471
https://security.gentoo.org/glsa/201708-01
https://security.netapp.com/advisory/ntap-20180802-0002/
https://www.debian.org/security/2017/dsa-3854