CVE Vulnerabilities

CVE-2017-3145

Use After Free

Published: Jan 16, 2019 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

Name Vendor Start Version End Version
Bind Isc 9.4.0 (including) 9.8.8 (including)
Bind Isc 9.9.0 (including) 9.9.11 (including)
Bind Isc 9.10.0 (including) 9.10.6 (including)
Bind Isc 9.11.0 (including) 9.11.2 (including)
Bind Isc 9.9.3-s1 (including) 9.9.3-s1 (including)
Bind Isc 9.9.11-s1 (including) 9.9.11-s1 (including)
Bind Isc 9.10.5-s1 (including) 9.10.5-s1 (including)
Bind Isc 9.10.6-s1 (including) 9.10.6-s1 (including)
Bind Isc 9.12.0-alpha1 (including) 9.12.0-alpha1 (including)
Bind Isc 9.12.0-b1 (including) 9.12.0-b1 (including)
Bind Isc 9.12.0-b2 (including) 9.12.0-b2 (including)
Bind Isc 9.12.0-rc1 (including) 9.12.0-rc1 (including)
Red Hat Enterprise Linux 6 RedHat bind-32:9.8.2-0.62.rc1.el6_9.5 *
Red Hat Enterprise Linux 6.4 Advanced Update Support RedHat bind-32:9.8.2-0.17.rc1.el6_4.13 *
Red Hat Enterprise Linux 6.5 Advanced Update Support RedHat bind-32:9.8.2-0.23.rc1.el6_5.8 *
Red Hat Enterprise Linux 6.6 Advanced Update Support RedHat bind-32:9.8.2-0.30.rc1.el6_6.10 *
Red Hat Enterprise Linux 6.6 Telco Extended Update Support RedHat bind-32:9.8.2-0.30.rc1.el6_6.10 *
Red Hat Enterprise Linux 6.7 Extended Update Support RedHat bind-32:9.8.2-0.37.rc1.el6_7.12 *
Red Hat Enterprise Linux 7 RedHat bind-32:9.9.4-51.el7_4.2 *
Red Hat Enterprise Linux 7.2 Advanced Update Support RedHat bind-32:9.9.4-29.el7_2.8 *
Red Hat Enterprise Linux 7.2 Telco Extended Update Support RedHat bind-32:9.9.4-29.el7_2.8 *
Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions RedHat bind-32:9.9.4-29.el7_2.8 *
Red Hat Enterprise Linux 7.3 Extended Update Support RedHat bind-32:9.9.4-50.el7_3.3 *
Bind9 Ubuntu artful *
Bind9 Ubuntu esm-infra-legacy/trusty *
Bind9 Ubuntu esm-infra/xenial *
Bind9 Ubuntu trusty *
Bind9 Ubuntu trusty/esm *
Bind9 Ubuntu upstream *
Bind9 Ubuntu xenial *

Potential Mitigations

References