CVE-2017-3135

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.

• CWE-476

• http://rhn.redhat.com/errata/RHSA-2017-0276.htmlThird Party Advisory
• http://www.securityfocus.com/bid/96150Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037801Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_usThird Party Advisory
• https://kb.isc.org/docs/aa-01453Vendor Advisory
• https://security.gentoo.org/glsa/201708-01Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
• https://www.debian.org/security/2017/dsa-3795Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0276.htmlThird Party Advisory
• http://www.securityfocus.com/bid/96150Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037801Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_usThird Party Advisory
• https://kb.isc.org/docs/aa-01453Vendor Advisory
• https://security.gentoo.org/glsa/201708-01Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
• https://www.debian.org/security/2017/dsa-3795Third Party Advisory

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3129A Cross-Site Scripting vulnerability in Fortinet FortiWeb ve…
• CVE-2017-3130An information disclosure vulnerability in Fortinet FortiOS …
• CVE-2017-3131A Cross-Site Scripting vulnerability in Fortinet FortiOS ver…
• CVE-2017-3132A Cross-Site Scripting vulnerability in Fortinet FortiOS ver…
• CVE-2017-3133A Cross-Site Scripting vulnerability in Fortinet FortiOS ver…
• CVE-2017-3134An escalation of privilege vulnerability in Fortinet FortiWL…
• CVE-2017-3136A query with a specific set of characteristics could cause a…5.9
• CVE-2017-3137Mistaken assumptions about the ordering of records in the an…7.5
• CVE-2017-3138named contains a feature which allows operators to issue com…6.5
• CVE-2017-3139A denial of service flaw was found in the way BIND handled D…7.5
• CVE-2017-3140If named is configured to use Response Policy Zones (RPZ) an…3.7
• CVE-2017-3141The BIND installer on Windows uses an unquoted service path …7.2