Unrated
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigg...
CVE-2017-3145
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2017-3145 bind Fixed in: 9.11.2_p1-r0
- Debian DEBIAN-CVE-2017-3145 bind9 Fixed in: 1:9.11.2.P1-1
Original description The description as published by the source.
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
References
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory kb.isc.org
- advisory lists.debian.org
- advisory security.netapp.com
- advisory supportportal.juniper.net
- advisory debian.org