CVE-2017-3136

CVE-2017-3136 describes a denial-of-service vulnerability affecting various versions of BIND 9, including those used by Debian, ISC, NetApp, and Red Hat. A specially crafted DNS query can trigger an assertion failure in servers configured with the DNS64 feature, causing them to terminate. This vulnerability has a CVSS score of 5.9 (Medium) and an EPSS score indicating a higher-than-average exploitability probability, with a FAUCET Risk Score of 96/100. The attack vector is network-based with high attack complexity, requiring no user interaction, and its primary impact is high availability loss. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has received some community discussion and media coverage.