diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 02847b3d90..8f1a8d266f 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -42,9 +42,11 @@ - Combining dns64 and rpz can result in dereferencing - a NULL pointer (read). This flaw is dislosed in CVE-2017-3135. - [RT#44434] + If a server is configured with a response policy zone (RPZ) + that rewrites an answer with local data, and is also configured + for DNS64 address mapping, a NULL pointer can be read + triggering a server crash. This flaw is disclosed in + CVE-2017-3135. [RT #44434]