National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2017-3141

Change History

Initial Analysis - 2/11/2019 2:32:23 PM

Action Type Old Value New Value
Changed Reference Type
https://security.gentoo.org/glsa/201708-01 No Types Assigned
https://security.gentoo.org/glsa/201708-01 Third Party Advisory
Added CWE
CWE-264
Changed Reference Type
http://www.securityfocus.com/bid/99089 No Types Assigned
http://www.securityfocus.com/bid/99089 Third Party Advisory, VDB Entry
Added CVSS V3
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Changed Reference Type
https://www.exploit-db.com/exploits/42121/ No Types Assigned
https://www.exploit-db.com/exploits/42121/ Exploit, Third Party Advisory, VDB Entry
Added CVSS V2
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Changed Reference Type
https://kb.isc.org/docs/aa-01496 No Types Assigned
https://kb.isc.org/docs/aa-01496 Vendor Advisory
Changed Reference Type
http://www.securitytracker.com/id/1038693 No Types Assigned
http://www.securitytracker.com/id/1038693 Third Party Advisory, VDB Entry
Changed Reference Type
https://security.netapp.com/advisory/ntap-20180926-0001/ No Types Assigned
https://security.netapp.com/advisory/ntap-20180926-0001/ Third Party Advisory
Added CPE Configuration
OR
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.2.6 up to (including) 9.2.9
     *cpe:2.3:a:isc:bind:9.2.6:p2:*:*:*:*:*:*
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.3.2 up to (including) 9.3.6
     *cpe:2.3:a:isc:bind:9.3.2:p1:*:*:*:*:*:*
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.4.0 up to (including) 9.8.8
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.9.0 up to (including) 9.9.10
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.10.0 up to (including) 9.10.5
     *cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from (including) 9.11.0 up to (including) 9.11.1