Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: ISC BIND 9 — RHSA-2017:1679 Clear all filters
TI-2017-02363 CVE-2017-3143 · GHSA-jxfm-jqx8-8h25

An error in TSIG authentication can permit unauthorized dynamic updates

Priority MEDIUM 50

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.18157 Published 2019-01-16 Partial fix
TI-2017-02362 CVE-2017-3142 · GHSA-jhf7-373h-xx92

An error in TSIG authentication can permit unauthorized zone transfers

Priority LOW 32

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructe…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.054 Published 2019-01-16 Partial fix CWE-20