CVE-2017-3145: debian debian_linux Use After Free

CVSS: 7.5v3.0HighModified

AliasesALPINE-CVE-2017-3145MGASA-2018-0092MGASA-2018-0093+13 more

Published 16-01-2019Last modified 17-09-2024

Vulnerability summary

CVE-2017-3145 is a high (CVSS 7.5) Use After Free vulnerability in debian debian_linux. EPSS estimates a 27.93% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities.

Overall risk

36/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.0 (CVE.org)

EPSS score

27.93%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 3

OPENSUSE-SU-2024:10650-1 CGA-CQ37-C6XJ-RM4V CGA-Q4C9-PW79-W4WW

Timeline

16-01-2019
PublishedVulnerability first disclosed.
17-09-2024
Last modifiedVulnerability information updated.

Description

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.

CVSS metrics

11 scores · 8 sources · 3 versions

v3.17.5v3.07.5v2.05.0

EPSS trend

Probability

27.93%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 27.93% on 20-09-2026

20-09-202620-10-2026

EPSS score

27.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Redhat21 products

enterprise_linux_desktop6.0 | 7.0
enterprise_linux_server6.0 | 7.0
enterprise_linux_server_aus6.4 | 6.5 | 6.6 | 7.2 | 7.3 | 7.4 | 7.6
enterprise_linux_server_eus6.7 | 7.3 | 7.4 | 7.5 | 7.6
enterprise_linux_server_tus6.6 | 7.2 | 7.3 | 7.6

enterprise_linux_workstation6.0 | 7.0
bind< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-chroot< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-debuginfo< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-devel< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-libs< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-libs-lite< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-license< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-lite-devel< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-pkcs11< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-pkcs11-devel< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-pkcs11-libs< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-pkcs11-utils< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-sdb< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-sdb-chroot< 32:9.9.4-51.el7_4.2 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8
bind-utils< 32:9.8.2-0.62.rc1.el6_9.5 | < 32:9.9.4-51.el7_4.2 | < 32:9.8.2-0.37.rc1.el6_7.12 | < 32:9.8.2-0.17.rc1.el6_4.13 | < 32:9.8.2-0.23.rc1.el6_5.8 | < 32:9.8.2-0.30.rc1.el6_6.10 | < 32:9.9.4-50.el7_3.3 | < 32:9.9.4-29.el7_2.8

Show all 21

Suse18 products

bind&distro=SUSE Linux Enterprise Desktop 12 SP2< 9.9.9P1-63.7.1
bind&distro=SUSE Linux Enterprise Desktop 12 SP3< 9.9.9P1-63.7.1
bind&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 9.9.6P1-0.51.7.1
bind&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 9.9.6P1-0.51.7.1
bind&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 9.9.6P1-0.51.7.1

Show all 18

Debian2 products

bind9< 1:9.11.2.P1-1 | < 1:9.9.5.dfsg-9+deb8u15 | < 1:9.10.3.dfsg.P4-12.3+deb9u4 | < 1:9.8.4.dfsg.P1-6+nmu2+deb7u19
debian_linuxEOL7.0 | 8.0 | 9.0

Isc2 products

bind≥ 9.4.0, ≤ 9.8.8 | ≥ 9.9.0, ≤ 9.9.11 | ≥ 9.10.0, ≤ 9.10.6 | ≥ 9.11.0, ≤ 9.11.2 | 9.9.3:s1 | 9.9.11:s1 | 9.10.5:s1 | 9.10.6:s1 | 9.12.0:alpha1 | 9.12.0:b1 | 9.12.0:b2 | 9.12.0:rc1
bind 99.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1

Mageia2 products

bind< 9.10.6.P1-1.mga5
bind< 9.10.6.P1-1.mga6

Alpine1 product

bind≥ 9.4.0, < 9.11.2_p1-r0 | ≥ 9.4.0, < 9.10.6_p1-r0

Chainguard1 product

bindAll versions (No fix recorded)

Juniper1 product

junos12.1x46-d76 | 12.3x48-d70 | 15.1x49-d140 | 17.4r2 | 18.1r2 | 18.2r1

Netapp1 product

data_ontap_edgena

Ubuntu1 product

bind9< 1:9.9.5.dfsg-3ubuntu0.17 | < 1:9.10.3.dfsg.P4-8ubuntu1.10

Wolfi1 product

bindAll versions (No fix recorded)

11 vendors · 51 products

References

37 links

access.redhat.com/errata/RHSA-2018:0102Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:0487Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.debian.org/security/2018/dsa-4089Vendor AdvisoryX Refsource DEBIANThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:0488Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:0101Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securitytracker.com/id/1040195VDB EntryX Refsource SECTRACKBroken LinkThird Party AdvisoryAdvisory
kb.isc.org/docs/aa-01542X Refsource CONFIRMVendor AdvisoryAdvisory
www.securityfocus.com/bid/102716VDB EntryX Refsource BIDBroken LinkThird Party AdvisoryAdvisory
lists.debian.org/debian-lts-announce/2018/01/msg00029.htmlMailing ListX Refsource MLISTThird Party AdvisoryAdvisory
security.netapp.com/advisory/ntap-20180117-0003/X Refsource CONFIRMThird Party AdvisoryAdvisory

Show all 37 references

supportportal.juniper.net/s/…Vendor AdvisoryX Refsource CONFIRMThird Party AdvisoryAdvisory
security.alpinelinux.org/vuln/CVE-2017-3145Advisory
advisories.mageia.org/MGASA-2018-0092.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=22409REPORT
kb.isc.org/article/AA-01542WEBARTICLEREPORT
kb.isc.org/article/AA-01548WEB
advisories.mageia.org/MGASA-2018-0093.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=22424REPORT
www.suse.com/support/update/announcement/2018/suse-su-20180303-1/Advisory
bugzilla.suse.com/1040039REPORT
bugzilla.suse.com/1047184REPORT
bugzilla.suse.com/1076118REPORT
www.suse.com/security/cve/CVE-2017-3145WEB
www.suse.com/support/update/announcement/2018/suse-su-20180362-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1534812REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0101.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-3145REPORT
www.cve.org/CVERecord?id=CVE-2017-3145AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-3145Advisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0102.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0487.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0488.jsonAdvisory
ubuntu.com/security/CVE-2017-3145REPORT
ubuntu.com/security/notices/USN-3535-1Advisory
ubuntu.com/security/notices/USN-3535-2Advisory
security-tracker.debian.org/tracker/CVE-2017-3145Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities