CVE-2017-3139

HIGH

Red Hat Enterprise Linux Server AUS - Denial of Service via DNSSEC Validation Assertion Failure

Title source: llm

Description

A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_confirm

https://access.redhat.com/security/cve/cve-2017-3139

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1447743

Scores

CVSS v3 7.5

EPSS 0.0163

EPSS Percentile 73.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-617

Status published

Products (7)

redhat/enterprise_linux_server_aus 6.2

redhat/enterprise_linux_server_aus 6.4

redhat/enterprise_linux_server_aus 6.5

redhat/enterprise_linux_server_aus 6.6

redhat/enterprise_linux_server_eus 6.7

redhat/enterprise_linux_server_tus 6.5

redhat/enterprise_linux_server_tus 6.6

Published Apr 09, 2019

Tracked Since Feb 18, 2026