From c5eedfe91fc9cafba32db35d60a68bf70c9ff210 Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Mon, 23 Jan 2017 20:04:56 -0800 Subject: [PATCH] [v9_10] expand relnote (cherry picked from commit afa0ff0cbb75f4ce20d082eb3cb30ea6b2840920) --- doc/arm/notes.xml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 02847b3d90..8f1a8d266f 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -42,9 +42,11 @@ - Combining dns64 and rpz can result in dereferencing - a NULL pointer (read). This flaw is dislosed in CVE-2017-3135. - [RT#44434] + If a server is configured with a response policy zone (RPZ) + that rewrites an answer with local data, and is also configured + for DNS64 address mapping, a NULL pointer can be read + triggering a server crash. This flaw is disclosed in + CVE-2017-3135. [RT #44434]