2 lines
5.4 KiB
JSON
2 lines
5.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIND 9","vendor":"ISC","versions":[{"status":"affected","version":"9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1"}]}],"source":"security-officer@isc.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","matchCriteriaId":"A8E6E2D9-E137-498C-B175-1CA268B6E551","versionEndIncluding":"9.11.1","versionStartIncluding":"9.11.0","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:9.9.10:*:*:*:*:*:*:*","matchCriteriaId":"A64173CC-F89B-4276-8E33-525CC89A22A1","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:9.9.10:s1:*:*:*:*:*:*","matchCriteriaId":"96715BE6-F6C4-4A9E-85F2-4E53FE740776","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:9.10.5:*:*:*:*:*:*:*","matchCriteriaId":"30ACDFC4-CD8D-4B89-B6C8-8466174B3D76","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*","matchCriteriaId":"82A6F259-EB06-4F31-9F68-A76F257756DC","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*","matchCriteriaId":"E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*","matchCriteriaId":"85DF4B3F-4BBC-42B7-B729-096934523D63","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*","matchCriteriaId":"7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1."},{"lang":"es","value":"Si named está configurado para que emplee RPZ (Response Policy Zones), un error a a hora de procesar algunos tipos de regla puede conducir a una condición en la que BIND entrará en un bucle infinito al manejar una consulta. Afecta a BIND en la versión 9.9.10, 9.10.5, desde la versión 9.11.0 hasta la 9.11.1 y en las versiones 9.9.10-S1 y 9.10.5-S1."}],"id":"CVE-2017-3140","lastModified":"2026-06-17T01:17:36.170","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.0"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"security-officer@isc.org","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-16T20:29:00.457","references":[{"source":"security-officer@isc.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99088"},{"source":"security-officer@isc.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038692"},{"source":"security-officer@isc.org","tags":["Third Party Advisory"],"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us"},{"source":"security-officer@isc.org","tags":["Vendor Advisory"],"url":"https://kb.isc.org/docs/aa-01495"},{"source":"security-officer@isc.org","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201708-01"},{"source":"security-officer@isc.org","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20180926-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99088"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038692"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.isc.org/docs/aa-01495"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201708-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20180926-0001/"}],"sourceIdentifier":"security-officer@isc.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}
|