CVE-2017-3140

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
iscbind
9.11.0 ≤
𝑥
≤ 9.11.1
iscbind
9.9.10
iscbind
9.9.10:s1
iscbind
9.10.5
iscbind
9.10.5:s1
netappdata_ontap_edge
-
netappelement_software
-
netapponcommand_balance
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
trusty
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
bind
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-chrootenv
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
bind-devel
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
bind-doc
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-utils
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise desktop 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise desktop 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise desktop 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise sap 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise server 15 SP6
9.18.24-150600.1.5
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
libbind9-160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libbind9-1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
libdns1605
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libdns169
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libirs-devel
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libirs160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libirs1601
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libisc1606
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
libisc166
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisccc160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisccc1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
libisccfg160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libisccfg1600
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise desktop 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise desktop 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise sap 15 SP7
9.16.6-150300.22.50.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP6
9.16.6-150300.22.41.1
fixed
suse enterprise server 15 SP7
9.16.6-150300.22.50.1
fixed
liblwres160
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
libns1604
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP5
9.16.6-150300.22.27.1
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP5
9.16.6-150300.22.27.1
fixed
python3-bind
suse enterprise desktop 15
9.11.2-10.4
fixed
suse enterprise desktop 15 SP1
9.11.2-12.8.1
fixed
suse enterprise desktop 15 SP2
9.11.2-12.13.2
fixed
suse enterprise desktop 15 SP3
9.16.6-20.39
fixed
suse enterprise desktop 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise desktop 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise sap 15
9.11.2-10.4
fixed
suse enterprise sap 15 SP1
9.11.2-12.8.1
fixed
suse enterprise sap 15 SP2
9.11.2-12.13.2
fixed
suse enterprise sap 15 SP3
9.16.6-20.39
fixed
suse enterprise sap 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise sap 15 SP5
9.16.38-150400.5.20.2
fixed
suse enterprise server 15
9.11.2-10.4
fixed
suse enterprise server 15 SP1
9.11.2-12.8.1
fixed
suse enterprise server 15 SP2
9.11.2-12.13.2
fixed
suse enterprise server 15 SP3
9.16.6-20.39
fixed
suse enterprise server 15 SP4
9.16.20-150400.3.6
fixed
suse enterprise server 15 SP5
9.16.38-150400.5.20.2
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/99088
http://www.securitytracker.com/id/1038692
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us
https://kb.isc.org/docs/aa-01495
https://security.gentoo.org/glsa/201708-01
https://security.netapp.com/advisory/ntap-20180926-0001/
http://www.securityfocus.com/bid/99088
http://www.securitytracker.com/id/1038692
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us
https://kb.isc.org/docs/aa-01495
https://security.gentoo.org/glsa/201708-01
https://security.netapp.com/advisory/ntap-20180926-0001/