High
Security advisory
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-3145
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 05:41 UTC · Revision 1
Source evidence
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
osv:CVE-2017-3145
Complete source record
{
"id": "3e093a2b23aa934dbded084b97ad88d24cdb3f7ff0751dbd35a594ba6d43b92c",
"url": "https://osv.dev/vulnerability/CVE-2017-3145",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-3145",
"summary": "BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.",
"evidence": "osv:CVE-2017-3145",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-3145",
"aliases": [
"CVE-2017-3145"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/isc-projects/bind9",
"type": "GIT",
"events": [
{
"introduced": "600305bf9b2e7ab79b95989190f84fdcf4140cc1"
},
{
"last_affected": "8fc2e36186691698d247ab040b83793a9189de73"
},
{
"introduced": "3514c49b2fbcdf95b2735878e2487fce9a3ddad5"
},
{
"last_affected": "efa5130b2313f4ecfbd7283979f7fe34396c3d00"
},
{
"introduced": "63fbb3ea39094353765c04a6066b9e1d1013992a"
},
{
"last_affected": "9d1ea0b7feb9407baddf36c550b1c1f274d13baa"
},
{
"introduced": "1477c19dd9a347ee19a42dac227f299a4680506f"
},
{
"last_affected": "0a2b929f15e00f35e0f0b49d862a2bb9b6be024e"
},
{
"introduced": "1c59cea1c0e26e2da3f2afb90200bfe9f7748c03"
},
{
"last_affected": "f9c3aba9b3070603bd8582399646480ec6bc5912"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.4.0"
},
{
"last_affected": "9.8.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0"
},
{
"last_affected": "9.9.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.0"
},
{
"last_affected": "9.10.6"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.11.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.3-s1"
},
{
"last_affected": "9.9.3-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.11:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.11-s1"
},
{
"last_affected": "9.9.11-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s1"
},
{
"last_affected": "9.10.5-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.6-s1"
},
{
"last_affected": "9.10.6-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:b1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-b1"
},
{
"last_affected": "9.12.0-b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:b2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-b2"
},
{
"last_affected": "9.12.0-b2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-rc1"
},
{
"last_affected": "9.12.0-rc1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"9.10.5-s1",
"9.10.6-s1",
"9.12.0-b1",
"9.12.0-b2",
"9.12.0-rc1",
"9.9.11-s1",
"9.9.3-s1",
"v9.9.11",
"v9.11.2",
"v9.9.11rc2",
"v9.11.2rc2",
"v9.9.11rc1",
"v9.11.2rc1",
"v9.9.11b1",
"v9.11.2b1",
"v9.9.10",
"v9.11.1",
"v9.9.10rc3",
"v9.11.1rc3",
"v9.9.10rc2",
"v9.11.1rc2",
"v9.9.10rc1",
"v9.11.1rc1",
"v9.9.10b1",
"v9.11.1b1",
"v9.11.0",
"v9.9.9",
"v9.9.9rc1",
"v9.9.9b2",
"v9.9.9b1",
"v9.9.8",
"v9.9.8rc1",
"v9.9.8b1",
"v9.9.7",
"v9.9.7rc2",
"v9.9.7rc1",
"v9.9.7b1",
"v9.9.6",
"v9.9.6rc2",
"v9.9.6rc1",
"v9.9.6b2",
"v9.9.6b1",
"v9.9.5",
"v9.9.5rc2",
"v9.9.5rc1",
"v9.9.5b1",
"v9.9.4",
"v9.9.4rc2",
"v9.9.4b1",
"v9.9.3",
"v9.9.3rc2",
"v9.9.3rc1",
"v9.9.3b2",
"v9.9.3b1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3145.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.isc.org/isc-projects/bind9",
"type": "GIT",
"events": [
{
"introduced": "600305bf9b2e7ab79b95989190f84fdcf4140cc1"
},
{
"last_affected": "8fc2e36186691698d247ab040b83793a9189de73"
},
{
"introduced": "3514c49b2fbcdf95b2735878e2487fce9a3ddad5"
},
{
"last_affected": "efa5130b2313f4ecfbd7283979f7fe34396c3d00"
},
{
"introduced": "63fbb3ea39094353765c04a6066b9e1d1013992a"
},
{
"last_affected": "9d1ea0b7feb9407baddf36c550b1c1f274d13baa"
},
{
"introduced": "1477c19dd9a347ee19a42dac227f299a4680506f"
},
{
"last_affected": "0a2b929f15e00f35e0f0b49d862a2bb9b6be024e"
},
{
"introduced": "1c59cea1c0e26e2da3f2afb90200bfe9f7748c03"
},
{
"last_affected": "f9c3aba9b3070603bd8582399646480ec6bc5912"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.4.0"
},
{
"last_affected": "9.8.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0"
},
{
"last_affected": "9.9.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.0"
},
{
"last_affected": "9.10.6"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.11.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.3-s1"
},
{
"last_affected": "9.9.3-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.11:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.11-s1"
},
{
"last_affected": "9.9.11-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s1"
},
{
"last_affected": "9.10.5-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.6-s1"
},
{
"last_affected": "9.10.6-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:b1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-b1"
},
{
"last_affected": "9.12.0-b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:b2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-b2"
},
{
"last_affected": "9.12.0-b2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.12.0:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.12.0-rc1"
},
{
"last_affected": "9.12.0-rc1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"9.10.5-s1",
"9.10.6-s1",
"9.12.0-b1",
"9.12.0-b2",
"9.12.0-rc1",
"9.9.11-s1",
"9.9.3-s1",
"v9.9.11",
"v9.11.2",
"v9.9.11rc2",
"v9.11.2rc2",
"v9.9.11rc1",
"v9.11.2rc1",
"v9.9.11b1",
"v9.11.2b1",
"v9.9.10",
"v9.11.1",
"v9.9.10rc3",
"v9.11.1rc3",
"v9.9.10rc2",
"v9.11.1rc2",
"v9.9.10rc1",
"v9.11.1rc1",
"v9.9.10b1",
"v9.11.1b1",
"v9.11.0",
"v9.9.9",
"v9.9.9rc1",
"v9.9.9b2",
"v9.9.9b1",
"v9.9.8",
"v9.9.8rc1",
"v9.9.8b1",
"v9.9.7",
"v9.9.7rc2",
"v9.9.7rc1",
"v9.9.7b1",
"v9.9.6",
"v9.9.6rc2",
"v9.9.6rc1",
"v9.9.6b2",
"v9.9.6b1",
"v9.9.5",
"v9.9.5rc2",
"v9.9.5rc1",
"v9.9.5b1",
"v9.9.4",
"v9.9.4rc2",
"v9.9.4b1",
"v9.9.3",
"v9.9.3rc2",
"v9.9.3rc1",
"v9.9.3b2",
"v9.9.3b1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3145.json"
}
}
],
"modified": "2026-10-24T10:30:32.287060726Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2018:0101",
"https://access.redhat.com/errata/RHSA-2018:0102",
"https://access.redhat.com/errata/RHSA-2018:0487",
"https://access.redhat.com/errata/RHSA-2018:0488",
"https://kb.isc.org/docs/aa-01542",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html",
"https://security.netapp.com/advisory/ntap-20180117-0003/",
"https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named",
"https://www.debian.org/security/2018/dsa-4089"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:isc:bind:9.12.0:alpha1:*:*:*:*:*:*"
],
"vendor_product": "isc:bind",
"extracted_events": [
{
"range": [
{
"introduced": "9.12.0-alpha1"
},
{
"last_affected": "9.12.0-alpha1"
},
{
"introduced": "9.12.0-alpha1"
},
{
"last_affected": "9.12.0-alpha1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:juniper:junos:12.1x46-d76:-:*:*:*:*:*:*",
"cpe:2.3:o:juniper:junos:12.3x48-d70:-:*:*:*:*:*:*",
"cpe:2.3:o:juniper:junos:15.1x49-d140:-:*:*:*:*:*:*",
"cpe:2.3:o:juniper:junos:17.4r2:-:*:*:*:*:*:*",
"cpe:2.3:o:juniper:junos:18.1r2:-:*:*:*:*:*:*",
"cpe:2.3:o:juniper:junos:18.2r1:-:*:*:*:*:*:*"
],
"vendor_product": "juniper:junos",
"extracted_events": [
{
"range": [
{
"introduced": "12.1x46-d76-NA"
},
{
"last_affected": "12.1x46-d76-NA"
},
{
"introduced": "12.3x48-d70-NA"
},
{
"last_affected": "12.3x48-d70-NA"
},
{
"introduced": "15.1x49-d140-NA"
},
{
"last_affected": "15.1x49-d140-NA"
},
{
"introduced": "17.4r2-NA"
},
{
"last_affected": "17.4r2-NA"
},
{
"introduced": "18.1r2-NA"
},
{
"last_affected": "18.1r2-NA"
},
{
"introduced": "18.2r1-NA"
},
{
"last_affected": "18.2r1-NA"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "6.4"
},
{
"last_affected": "6.4"
},
{
"introduced": "6.5"
},
{
"last_affected": "6.5"
},
{
"introduced": "6.6"
},
{
"last_affected": "6.6"
},
{
"introduced": "7.2"
},
{
"last_affected": "7.2"
},
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "6.7"
},
{
"last_affected": "6.7"
},
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_tus",
"extracted_events": [
{
"range": [
{
"introduced": "6.6"
},
{
"last_affected": "6.6"
},
{
"introduced": "7.2"
},
{
"last_affected": "7.2"
},
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-3145",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 433000,
"published_at": "2019-01-16T20:29:00.69+00:00"
}