Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bind | Isc | 9.9.3 (including) | 9.9.3 (including) |
| Bind | Isc | 9.9.3-s1 (including) | 9.9.3-s1 (including) |
| Bind | Isc | 9.9.8 (including) | 9.9.8 (including) |
| Bind | Isc | 9.9.9-p5 (including) | 9.9.9-p5 (including) |
| Bind | Isc | 9.9.9-s7 (including) | 9.9.9-s7 (including) |
| Bind | Isc | 9.9.10-beta1 (including) | 9.9.10-beta1 (including) |
| Bind | Isc | 9.10.0 (including) | 9.10.0 (including) |
| Bind | Isc | 9.10.4-p1 (including) | 9.10.4-p1 (including) |
| Bind | Isc | 9.10.4-p2 (including) | 9.10.4-p2 (including) |
| Bind | Isc | 9.10.4-p3 (including) | 9.10.4-p3 (including) |
| Bind | Isc | 9.10.4-p4 (including) | 9.10.4-p4 (including) |
| Bind | Isc | 9.10.4-p5 (including) | 9.10.4-p5 (including) |
| Bind | Isc | 9.10.5-beta1 (including) | 9.10.5-beta1 (including) |
| Bind | Isc | 9.11.0 (including) | 9.11.0 (including) |
| Bind | Isc | 9.11.0-p1 (including) | 9.11.0-p1 (including) |
| Bind | Isc | 9.11.0-p2 (including) | 9.11.0-p2 (including) |
| Bind | Isc | 9.11.1-beta1 (including) | 9.11.1-beta1 (including) |
| Red Hat Enterprise Linux 7 | RedHat | bind-32:9.9.4-38.el7_3.2 | * |
| Bind9 | Ubuntu | devel | * |
| Bind9 | Ubuntu | esm-infra-legacy/trusty | * |
| Bind9 | Ubuntu | esm-infra/xenial | * |
| Bind9 | Ubuntu | precise | * |
| Bind9 | Ubuntu | trusty | * |
| Bind9 | Ubuntu | trusty/esm | * |
| Bind9 | Ubuntu | vivid/stable-phone-overlay | * |
| Bind9 | Ubuntu | vivid/ubuntu-core | * |
| Bind9 | Ubuntu | xenial | * |
| Bind9 | Ubuntu | yakkety | * |
| Bind9 | Ubuntu | zesty | * |
Potential Mitigations
References
- http://rhn.redhat.com/errata/RHSA-2017-0276.html
- http://www.securityfocus.com/bid/96150
- http://www.securitytracker.com/id/1037801
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03747en_us
- https://kb.isc.org/docs/aa-01453
- https://security.gentoo.org/glsa/201708-01
- https://security.netapp.com/advisory/ntap-20180926-0005/
- https://www.debian.org/security/2017/dsa-3795
- http://rhn.redhat.com/errata/RHSA-2017-0276.html
- http://www.securityfocus.com/bid/96150
- http://www.securitytracker.com/id/1037801
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03747en_us
- https://kb.isc.org/docs/aa-01453
- https://security.gentoo.org/glsa/201708-01
- https://security.netapp.com/advisory/ntap-20180926-0005/
- https://www.debian.org/security/2017/dsa-3795