CVE-2017-3143

N/A

Description

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

CVE Details

CVSS v3.1 ScoreN/A

Published1/16/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

debian:debian_linuxisc:bindredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_server_eusredhat:enterprise_linux_server_tusredhat:enterprise_linux_workstation

References

http://www.securityfocus.com/bid/99337(security-officer@isc.org)

http://www.securitytracker.com/id/1038809(security-officer@isc.org)

https://access.redhat.com/errata/RHSA-2017:1679(security-officer@isc.org)

https://access.redhat.com/errata/RHSA-2017:1680(security-officer@isc.org)

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us(security-officer@isc.org)

https://kb.isc.org/docs/aa-01503(security-officer@isc.org)

https://security.netapp.com/advisory/ntap-20190830-0003/(security-officer@isc.org)

https://www.debian.org/security/2017/dsa-3904(security-officer@isc.org)

http://www.securityfocus.com/bid/99337(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1038809(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:1679(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:1680(af854a3a-2127-422b-91ae-364da2661108)

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us(af854a3a-2127-422b-91ae-364da2661108)

https://kb.isc.org/docs/aa-01503(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20190830-0003/(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2017/dsa-3904(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.