Oval Definition:oval:com.ubuntu.xenial:def:20173136000
Revision Date:2019-01-16Version:1
Title:CVE-2017-3136 on Ubuntu 16.04 LTS (xenial) - medium.
Description:A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-3136
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The 'bind9' package in xenial was vulnerable but has been fixed (note: '1:9.10.3.dfsg.P4-8ubuntu1.6').
  • BACK