CVE-2017-3136 - Reachable Assertion

Severity

43%

Complexity

86%

Confidentiality

48%

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.

CVSS 3.0 Base Score 5.9. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Demo Examples

Reachable Assertion

CWE-617

In the excerpt below, an AssertionError (an unchecked exception) is thrown if the user hasn't entered an email address in an HTML form.


               
assert email != null;

Overview

First reported 6 years ago

2019-01-16 20:29:00

Last updated 5 years ago

2019-10-09 23:27:00

Affected Software

ISC BIND

ISC BIND 9.8.0 P1

9.8.0

ISC BIND 9.9.3

9.9.3

ISC BIND 9.9.10 Beta 1

9.9.10

ISC BIND 9.9.10 Release Candidate 1

9.9.10

ISC BIND 9.10.4 Patch 1

9.10.4

ISC BIND 9.10.4 Patch 2

9.10.4

ISC BIND 9.10.4 Patch 3

9.10.4

ISC BIND 9.10.4 Patch 4

9.10.4

ISC BIND 9.10.4 Patch 5

9.10.4

ISC BIND 9.10.4 Patch 6

9.10.4

ISC BIND 9.10.5 Beta 1

9.10.5

ISC BIND 9.10.5 Release Candidate 1

9.10.5

ISC BIND 9.11.0

9.11.0

ISC BIND 9.11.0 Patch 1

9.11.0

ISC BIND 9.11.0 Patch 2

9.11.0

ISC BIND 9.11.0 Patch 3

9.11.0

ISC BIND 9.11.1 Release Candidate 1

9.11.1

Red Hat Enterprise Linux Desktop 6.0

6.0

RedHat Enterprise Linux Desktop 7.0

7.0

Red Hat Enterprise Linux Server 6.0

6.0

RedHat Enterprise Linux Server 7.0

7.0

Red Hat Enterprise Linux Advanced mission critical Update Support (AUS) 7.3

7.3

Red Hat Enterprise Linux Server Advanced mission critical Update Support (AUS) 7.4

7.4

Red Hat Enterprise Linux Server Advanced mission critical Update Support (AUS) 7.6

7.6

Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.3

7.3

Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.4

7.4

Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.5

7.5

Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.6

7.6

Red Hat Enterprise Linux Server Telecommunications Update Service (TUS) 7.6

7.6

Red Hat Enterprise Linux Workstation 6.0

6.0

RedHat Enterprise Linux Workstation 7.0

7.0

NetApp Element Software

Debian Linux 8.0 (Jessie)

8.0

References

97653

Third Party Advisory, VDB Entry

1038259

Third Party Advisory, VDB Entry

RHSA-2017:1095

Third Party Advisory

RHSA-2017:1105

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us

Third Party Advisory

https://kb.isc.org/docs/aa-01465

Vendor Advisory

GLSA-201708-01

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180802-0002/

Third Party Advisory

DSA-3854

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.