suse · CVE-2017-3135

Quick triage

Priority: high Published: 2021-05-30 13:50:46 UTC Updated: 2026-04-18 15:47:55 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-3135 severity important: SUSE including 446 source package names (amazon/suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64, amazon/suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64, …), 760 product×package rows across 72 product lines (SUSE CaaS Platform 3.0, SUSE CaaS Platform 4.0, … (72 product lines)): Fixed 395, Known Not Affected 208, Known Affected 157.

Description:

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

cvelogic Threat Intelligence