Medium severity6.5NVD Advisory· Published Jan 16, 2019· Updated Jun 17, 2026
CVE-2017-3138
CVE-2017-3138
Description
named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
74cpe:2.3:a:isc:bind:9.10.4:*:*:*:*:*:*:*+ 33 more
- cpe:2.3:a:isc:bind:9.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.4:p7:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.10.5:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.0:p4:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.11.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.10:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p6:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:p7:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*
- (no CPE)range: 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9
- (no CPE)range: 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9
- cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
- osv-coords36 versionspkg:apk/chainguard/bindpkg:apk/chainguard/bind-devpkg:apk/chainguard/bind-dnssec-rootpkg:apk/chainguard/bind-dnssec-toolspkg:apk/chainguard/bind-docpkg:apk/chainguard/bind-libspkg:apk/chainguard/bind-pluginspkg:apk/chainguard/bind-toolspkg:apk/wolfi/bindpkg:apk/wolfi/bind-devpkg:apk/wolfi/bind-dnssec-rootpkg:apk/wolfi/bind-dnssec-toolspkg:apk/wolfi/bind-docpkg:apk/wolfi/bind-libspkg:apk/wolfi/bind-pluginspkg:apk/wolfi/bind-toolspkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/bind&distro=SUSE%20Manager%202.1pkg:rpm/suse/bind&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/bind&distro=SUSE%20OpenStack%20Cloud%205
< 0+ 35 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.9P1-28.34.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.9P1-28.34.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.9P1-59.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.6P1-0.44.1
- (no CPE)range: < 9.9.6P1-0.44.1
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/97657nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038260nvdThird Party AdvisoryVDB Entry
- kb.isc.org/docs/aa-01471nvdVendor Advisory
- security.gentoo.org/glsa/201708-01nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20180802-0002/nvdThird Party Advisory
- www.debian.org/security/2017/dsa-3854nvdThird Party Advisory
News mentions
0No linked articles in our index yet.