CVE-2017-3137
bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver
Severity
ImportantRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · April 12, 2017
Updated · June 30, 2026
Description
A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion