未評価
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigg...
CVE-2017-3145
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2017-3145 bind 修正版: 9.11.2_p1-r0
- Debian DEBIAN-CVE-2017-3145 bind9 修正版: 1:9.11.2.P1-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
参照URL
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory kb.isc.org
- advisory lists.debian.org
- advisory security.netapp.com
- advisory supportportal.juniper.net
- advisory debian.org