CVE-2017-3140

Published: 16 January 2019

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

Priority

Medium

CVSS 3 base score: 5.9

Status

Notes

Per ISC, "... affecting 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1,
and 9.10.5-S1"
Introduced by change #4377, which is not applied in any Ubuntu
releases

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3140
• https://kb.isc.org/article/AA-01495
• http://www.openwall.com/lists/oss-security/2017/06/14/4
• NVD
• Launchpad
• Debian