cbcvebase.
CVE-2017-3137
published 2019-10-30

CVE-2017-3137: The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.

Affected

47 ranges· showing 25
VendorProductVersion rangeFixed in
debianbind9< bind9 1:9.9.3.dfsg.P2-1 (bookworm)bind9 1:9.9.3.dfsg.P2-1 (bookworm)
debianbind9< bind9 1:9.10.3.dfsg.P4-12.3 (bookworm)bind9 1:9.10.3.dfsg.P4-12.3 (bookworm)
debianbind9
debiandebian_linux
debiandebian_linux
debiandebian_linux
iscbind
iscbind
iscbind
iscbind
iscbind
iscbind
iscbind9>= 0 < 1:9.9.3.dfsg.P2-11:9.9.3.dfsg.P2-1
iscbind9>= 0 < 1:9.10.3.dfsg.P4-12.31:9.10.3.dfsg.P4-12.3
iscbind9>= 0 < 1:9.9.3.dfsg.P2-11:9.9.3.dfsg.P2-1
iscbind9>= 0 < 1:9.10.3.dfsg.P4-12.31:9.10.3.dfsg.P4-12.3
iscbind9>= 0 < 1:9.9.3.dfsg.P2-11:9.9.3.dfsg.P2-1
iscbind9>= 0 < 1:9.10.3.dfsg.P4-12.31:9.10.3.dfsg.P4-12.3
iscbind9>= 0 < 1:9.9.3.dfsg.P2-11:9.9.3.dfsg.P2-1
iscbind9>= 0 < 1:9.10.3.dfsg.P4-12.31:9.10.3.dfsg.P4-12.3
iscbind9>= 0 < 1:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.14
iscbind9>= 0 < 1:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.6
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_server

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH