CVE ID:	CVE-2017-3135
Description:	Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
Test IDs:	1.3.6.1.4.1.25623.1.0.872366   1.3.6.1.4.1.25623.1.0.872367   1.3.6.1.4.1.25623.1.0.843054   1.3.6.1.4.1.25623.1.0.882658   1.3.6.1.4.1.25623.1.0.871759   1.3.6.1.4.1.25623.1.0.810547   1.3.6.1.4.1.25623.1.0.890843   1.3.6.1.4.1.25623.1.1.4.2017.0594.1   1.3.6.1.4.1.25623.1.1.4.2017.0596.1   1.3.6.1.4.1.25623.1.1.4.2017.0595.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3135 BugTraq ID: 96150 http://www.securityfocus.com/bid/96150 Debian Security Information: DSA-3795 (Google Search) https://www.debian.org/security/2017/dsa-3795 https://security.gentoo.org/glsa/201708-01 RedHat Security Advisories: RHSA-2017:0276 http://rhn.redhat.com/errata/RHSA-2017-0276.html http://www.securitytracker.com/id/1037801