RULE(RULE ID:711194)

Rule General Information
Release Date: 2017-06-13
Rule Name: ISC BIND Rndc Control Channel Assertion Failure Denial of Service Vulnerability (CVE-2017-3138)
Severity:
CVE ID:
Rule Protection Details
Description: A denial-of-service vulnerability was found in in ISC BIND. The vulnerability is caused by improper processing of a NULL command string sent to rndc control channel interface.
Impact: An attacker can launch a denial of service attack by exploiting the vulnerability successfully.
Affected OS: Windows, Other Unix, FreeBSD, Linux
Reference: SecurityTrackerID:1038260
SecurityFocusBID:97657
https://kb.isc.org/docs/aa-01471
https://security.gentoo.org/glsa/201708-01
Solutions
More advisories have been published on the website, please visit for more suggestions:
https://kb.isc.org/article/AA-01471